The summary dashboard provides a broad overview of the current status of events, alerts, and cases in Helix. Depending on the data available, the summary dashboard shows the following information.
Widget | Description |
|---|---|
Asset-Based Alert Correlations | Data about organizational-level assets (or entities), such as users and hosts, to identify potential insider threats. |
Overall Risk Score | The severity of a threat and the time it occurred. |
Recent Alerts | The table shows the five most recent alerts. Click the alert name to open the alert details page. The doughnut chart shows the number of open alerts. |
Open Cases | Data about open cases, such as the total number of alerts that belong to the case, the age of the case, and the assigned user. |
Case Metrics | The total number of open cases and how many of those have a critical status. |
Event Classes | Event class listings that help you perform quick searches. Click an event class to add it to the search bar. By default the last 24 hours are shown, and you can select a different period of time from the Show menu. |