In JSA, you can investigate offenses to determine the root cause of a network issue.
Use the Offenses tab to view all the offenses that occur on your network and complete the following tasks:
Investigate offenses, source and destination IP addresses, and network behaviors.
Correlate events and flows that are sourced from multiple networks to the same destination IP address.
Go to the various pages of the Offenses tab to investigate event and flow details.
Determine the unique events that caused an offense.