The To access the Insider Threat Activity Menu contains dashboard select the following dashboardsfrom the menu.
Insider Threat Activity screen covers many windows based threats covering activity from man windows event log types. The page uses status blocks to show the number of events for the specific date/time filter as selected from the top right corner with trending value as a percentage showing the trend either increasing, decreasing or neutral. under each status block is a line graph showing the last 24 hours of activity with the rate per hour of those events. There are some pie charts lower down on the screen showing which systems are affected, which windows accounts and the source IP of the activity causing the events. All of the screens can be clicked on and then view the raw data in the drill through at the bottom of the screen where data can be searched on and additional filtering can be performed in one or more of the data fields.
...