Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Offense Investigations

JSA can correlate events and flows with destination IP addresses located across multiple networks in the same offense and the same network incident. You can effectively investigate each offense in your network.

Using the Offenses tab, you can investigate offenses, source and destination IP addresses, network behaviors, and anomalies on your network.

Viewing Offenses

You can investigate offenses, source and destination IP addresses, and network behaviors.

  1. Click the Offenses tab.

  2. Double-click the offense that you want to investigate.

  3. On the toolbar, select Display >Destinations.

    You can investigate each destination to determine whether the destination is compromised or exhibiting suspicious behavior.

  4. On the toolbar, click Events.

The List of Events window displays all events that are associated with the offense. You can search, sort, and filter events.

Related Documentation