Use the dashboard to monitor investigation, threat hunting, and integration activity in Trellix Wise™ for Private Cloud. The dashboard provides a centralized view of investigation and hunt activity, reducing the need to check an integrated tool's dashboard because investigation and hunt data is available directly in Trellix Wise™ for Private Cloud.
To open the dashboard, select Menu > Dashboards.
The dashboard has two tabs:
Operations — View the current state of investigations, hunts, and connected integrations.
Overview — Review performance metrics for the selected time period, including false positive rate, time to verdict, investigation volume, and analyst hours saved.
The selected Time range applies to all panels. You can refresh individual panels without reloading the page and export the dashboard.
View and filter the dashboard
Log in to Trellix Wise™ for Private Cloud.
Select Operations or Overview to switch between dashboard views.
Select Time range and choose Last 24 hours, Last 7 days, Last 30 days, Last 90 days, or Custom.
To refresh a panel, select the refresh icon in the panel.
To export the dashboard, select the download icon at the top of the page.
Review dashboard metrics
Operations dashboard
Metric | Details |
|---|---|
Investigations Queue | Open investigations, including severity, Wise Verdict, age, and investigation counts by severity. |
Platform Health Monitor | Connection status and last checked time for connected integrations. |
Top Assets by Severity | Assets with the most associated findings, grouped by severity. |
Investigations Status | Investigation counts by status and severity. |
Top MITRE ATT&CK Tactics | Findings mapped to MITRE ATT&CK tactics. |
Hunt Queue | Hunts, including source, status, finding count, and last run time. |
Findings by IOC Type | IOC matches grouped by type, including hash, IP, domain, and URL. |
Assets with IOC matches | Distinct assets with IOC matches, grouped into endpoints and users. |
Overview dashboard
Metric | Details |
|---|---|
False Positive Rate | Percentage of Wise verdicts marked False Positive for the selected period, change from the previous period, and monthly verdict breakdown. |
Mean Time to Verdict | Average time Wise took to reach a verdict, grouped by verdict. |
Wise Total Investigations | Total number of investigations for the selected period, change from the previous period, and breakdown by Wise confidence level. |
Analyst Hours Saved | Estimated analyst hours saved for the selected period and monthly trend. |
Trellix Hunt Value | Total number of hunt findings for the selected period, grouped into Trellix-provided and manually created hunts. |
When a metric has no data for the selected time range, the metric displays an alert icon and an explanation instead of a chart.