Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
minLevel2
maxLevel2
typeflat

...

Purpose

This Activeboard emphasizes the detection information. Its component makes it easy to analyze all reported threats as they become available through the SentinelOne platform. The security team will be able to triage all available information and focus on the most priority detections thanks to the centralization of all data and incorporated filtering capabilities.

Expand
titleIncluded widgets

Threat Classification

Detections File Extension

...

Top Threats Detected

Detections by Site

Detections by Engine

Threats Detected by Group

Detections by OS

Detections by Confidence Level

Threats Detected by Last Logged in User

Info

Included in Content Pack

This Activeboard is part of SentinelOne Content Pack that contains five different SentinelOne Activeboards.

Open SentinelOne Threat Detections

Once you have installed the Activeboard, you can access it in the following ways:

Go to Exchange in the navigation pane and look for the Activeboard you want to open. Click Open.

Image Removed

...

Info

Know more about Activeboards

Refer to Manage and filter Activeboards article to know how to work with Activeboards.

Pre-requisites

...

Prerequisites

To run this Activeboard, you must have the following data source available in your domain:

...

Open Activeboard

...

Once you have installed the Activeboard,

...

  • Threat Classification

  • Detections by Site

  • Detections by OS

  • Detections File Extension

  • Detections by Engine

  • Detections by Confidence Level

  • Top Threats Detected

  • Threats Detected by Group

  • Threats Detected by Last Logged in User

...

you can use the Open button at the top right of the card in Exchange to access it and see the different widgets populated with the relevant data. You can also access the Activeboard area via the Navigation pane.

...

Info

Data loading takes too long?

Sometimes some widgets take time to upload the data, it is possible to speed up the process by creating aggregation tasks. Refer to the Aggregation tasks article to learn how to do it.

Use Activeboard

After installing and opening the Activeboard, you can use its widgets to visualize and monitor data. To do this, each widget offers a variety of customization and visualization options. Refer to Using widgets and Using inputs to know them all.