General

This view provides a complete overview of the activity and performance of the different products that make up the Crowdstrike security services. The dashboard provides security teams with interactive widgets to visualize the data:

Overview - total detections.
Detections - by severity, by tactics or by technique.
Audit authentications - failed or successful user logins events and policies disabled.
Detections status update.
Incidents - close and open incidents as well as the number of total incidents.

Security

The Security area of the Overview tab consists of widgets to visualize the safety and health of the activities carried out in your environment, including:

Detections by technique.
Quarantine files count.
Quarantine event files.
Quarantine files.
Total detections.
Detections by tactic.
Total detections by severity.

Authentication

This Authentication area of the Overview tab consists of widgets to visualize the authentication data, it composes of:

Authentication - failures and successful.
Total authentication audit events.
Events by API clientID.
Auth events per Operation name.
Geolocation of authentication events.
Authentication operations every 5 min.
Authentication operations.

Network infrastructure

The CrowdStrike Network Infrastructure consists of cross-country operations to maximize cloud performance across a global network. In this view, you can visualize the processes and operations over time, sift through errors, categorize by region, and much more.