The Manager can display a variety of information about the hosts inside and outside a network.
In the Attack Log, the host user name is available along with the IP address.
The Manager integrates with Trellix Logon Collector (Trellix - LC or TLC) to display user names of the hosts in your IPS and NTBA deployments. The Logon Collector provides an out-of-band method to obtain user names from the Active Directories.