Skip to main content
Version: 6.2

Cyber Security: Attacked Assets

The Cyber Security: Attacked Assets dashboard shows the targets of attacks. Data comes from module incident cards: hosts, destination addresses, and target accounts. Critical assets are identified using the module's critical-host lookup.

Intended for: SOC analysts, infrastructure owners, and incident investigators.

Data source: module incidents in Incident Manager.

Main Sections​

1. Key Metrics​

  • number of attacked hosts
  • number of attacked critical assets
  • number of target accounts

2. Attacked Hosts​

Shows hosts and critical assets with the most incidents.

3. Attacked Assets and Their Incidents​

For each asset, the table shows the number of incidents and rules, the number of high-severity incidents, and whether the asset is critical. Selecting a table row expands the incidents for that asset. Selecting an incident opens the Cyber Security: Attacking Assets dashboard filtered by its rule.