Skip to main content
Version: 6.2

Cyber Security: Attacking Assets

The Cyber Security: Attacking Assets dashboard shows the sources of attacks. Data comes from module incident cards: source addresses, accounts that initiated attacks, and incident and rule counts for each asset.

Intended for: SOC analysts and incident investigators.

Data source: module incidents in Incident Manager.

Main Sections​

1. Key Metrics​

  • number of attack source addresses
  • number of initiating accounts
  • number of incidents with a known source

2. Attack Sources​

Shows source addresses and initiating accounts with the most incidents.

3. Attacking Assets and Their Incidents​

For each asset, the table shows the number of incidents and rules, as well as the number of high-severity incidents. Selecting a table row expands the incidents for that asset. Selecting an incident opens the Cyber Security: Attacked Assets dashboard filtered by its rule.