Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Related Documentation



    The Attackers page contains any information on profiled attackers, and can be accessed by clicking Attackers in the left navigation menu.

    Figure 1: Recent Attackers

    Recent Attackers

    There are various data views you can navigate through the tabs near the top of the page. You can also search for attackers by using the search field in the upper right side of the page, under the Filter widget.

    • Top Attackers This tab contains an ordered list of the most active attackers, calculated based on a weighting algorithm that takes into account the number of incidents and their corresponding complexities.
    • Recent Attackers This tab displays a table of the most recent profiles active on the protected system. Each row consists of the Profile name, Threat level, their Public ID (for use with the Support Processor), the Last IP they used on the system, the First Time and Last Time they attacked the system, and available actions for that profile. Clicking on the "eye" icon or the profile name will lead you to the page for that particular profile. You can also click on a threat level to view other attackers with similar threat, and you can click on a Last IP to navigate to the Location page for that IP. To keep this data fresh, the monitor will periodically refresh the page (if Auto-refresh is enabled in the User Preferences). To stop this from happening, click the alarm clock icon in the top right corner of the tab to stop refresh.

    Note: The data displayed here is fluid, meaning it adjusts to the window size, either reorganizing the data or displaying more or less information depending the available space.


    Related Documentation


    Published: 2015-02-04