Compliance dashboards often use lists to target specific systems or users. For example, you can use a list to consolidate the systems that store, process or transmit credit card data for PCI. Lists are already included in many of the dashboards, making them easier for you to use. Keep these lists current to ensure accuracy for your dashboards.
Common lists used in the compliance dashboards are:
cde_hostnames
cde_ipv4
ephi_hostnames
ephi_ipv4
aws_iam_administrators
Important
There are two versions of IAM. If the URL you use to access the IAM UI ends with
fireeye.com, this document pertains to you. If the URL you use to access the IAM UI ends withtrellix.com, see the Trellix IAM Guide for information regarding IAM.
After you clone a dashboard, you can change it to fit your needs. Review the query in each widget by clicking the magnifying glass and validate the output for your organization. If the output is not correct for your organization, you can edit the query before applying a snapshot schedule.