You can use the Performance Metrics page to analyze the amount of time spent on resolving investigations.
The Performance Metrics dashboard provides an overview of the current status of investigations in a monitored environment. The trend graphs can help in assessing the resource allocation and effort estimation needed in a Security Operations Center (SOC) to investigate and analyze potential threats.
Note
The Performance Metrics reports data only from the Investigating dashboard.
The dashboard uses graphs to report these values. Each graph compares the current week to the previous 7-day period of time.
New Investigations — Investigations created from a monitored alert. These can be either manually created or created from an external source.
Weekly findings — The sum of all findings across the new investigations.
Total time spent in dashboard — The total amount of time spent by the security analysts on the Investigation dashboard.
Total time spent in dashboard by current user — The total time spent on the Investigation dashboard by the current user.
Total time spent in investigations — The total amount of time spent on investigating cases by all users.
Total time spent in investigations by current user — The total amount of time spent on the investigating cases by the current user.