The Network Detection and Response dashboard

Prev Next

NDR provides customizable dashboards, allowing analysts to focus on the metadata most relevant to them. For instance, one analyst might prioritize email and DNS metadata, while another focuses on HTTP metadata and trends.

The Web UI opens to the Detection page within the dashboard. The default dashboard displays widgets that provide an overview of the appliance's threat intelligence. You can navigate to other dashboards using the Main_menu.png icon (mega menu) at the top of the page.

Mainmenu_dashboard.png

The dashboard consists of:

Option

Description

Mega menu

An expandable menu (Main_menu.png ) that lists all the available pages of NDR , allowing you to quickly navigate to commonly used sections within the NDR application.

Navigation menu

Displays the hierarchy of user navigation.

Show

A dashboard filter provides the flexibility to analyze data based on varying timeframes, enabling you to effectively monitor and respond to charts, graphs, and alerts. You can search data for different timeframes (days, hours) using the Show filter.

  • Hours: Allows selection of data for specific hours within a day. (e.g. last 5 minutes, last 15 minutes, last 1 hour, last 6 hours, last 12 hours, last 24 hours)

  • Days: Allows selection of data for a number of past days (e.g. last 2 days, last 7 days, last 30 days).

  • Custom date and time selection: Allows you to set a custom date and time range to filter dashboard data according to your specific requirements.

  • First Day of Week: Allows selection of data from the first day of the week.

For example, when you select a 30-day timeframe from the Show filter, the dashboard automatically adjusts all charts and data to display relevant information for that period. The charts and data dynamically update based on your selection, ensuring you see alert data, charts, graphs, and trends for the specified timeframe.

Important

The selected timeline applies across all pages.

Back theme toggle button

The default background display theme is dark. To set the light background, click Background_theme_dark.png. To return to the dark theme, click Background_theme_light.png

Dashboards

The Dashboard displays key metrics and links to help you quickly access information about threat-related activity on your appliance.

The Dashboard page is categorized into:

  • Detection

  • Visibility

  • MITRE ATT&CK matrix

Widgets

Provides a summary view of the threat intelligence gathered by the NDR appliance