Anomaly and Threat Detection - Investigating An Event

As an Anomaly Detection registered user, you now have access to security and operational events analysis tools.

Investigating events helps you understand and react to your network's behaviour. 

How To investigate an Event

Navigate to the Events Page

1. Log in to Anomaly Detection.

2. Go To 'Events'.
   
   
   
   

3. Find the Event you wish to investigate.
4. Use the 'Add Filter' drop down menu to filter for a specific event type or category.
   
   
   
   
5. Click on the event you wish to investigate.
   
   
6. Within the event page you view the number of occurrences, relevant IP's and what triggered the event. You also have the ability to download a packet capture.
   
   
7. You can respond to an event by clicking on the recommended action button the bottom right corner. (Enterprise Customers Only)