The Analysis tab on the Menu bar enables you to perform network and events analysis.
When you want to analyze a situation in your network - you want to view an issue, check on the issue, drill down to the root cause, and resolve. These stages can be furnished in the Manager as follows:
- Monitoring — The Dashboard page enables you to view any system health or network issues. Your goal is to understand the overall posture and identify anomalies.
- Initial Investigation — The Analysis tab options enable you to research anomalies and establish the context like the security monitors, callback activity, malware downloads, high-risk endpoints, and network forensics.
- Detailed Investigation — Attack Log enables you to determine the root cause of the network issue. It allows you to isolate, correlate and validate events and provides you the grass root details like raw logs and packet captures. This in turn helps you to resolve the issue.