Main Dashboard

Top Daily Malicious Activities
Sensitive Servers Status
Malicious Files Detected

Alerts

Alert Name Action Severity Machine Name Time
Malicious document was downloaded on multiple machines Success High ITManager-PC 02:08:24

02:08:24 [**] [File Name: GamesSchedules.Doc] A suspicious exe file was downloaded [Action: Success] [Event Count: 6] [Destination Machine: ITManager-PC, ITAnalystTylor-PC, ITAnalystMonica-PC, ITAnalystChris-PS, ITAnalystAndrea-PC, ITAnalystJade-PC, ITAnalystEli-PC] [**]

Multiple users failed to log into a specific machine Failure Medium FinancialAnalyst-PC 03:42:18

03:42:18 [**] An account failed to log on. [Action: Failure] [Event Count: 10] [Account Name: FinancialAnalyst-PC, BusinessAnalyst] [Account Domain: Olympics.com] [**]

Malicious traffic was blocked Blocked Medium Reservations-PC 04:31:08

04:31:08 [**] The system detected an attempt to establish a connection to a malicious machine. [Action: Block] [Event Count: 50] [Destination Machine: Reservations-PC] [**]

User changed their own password Success Low HRManager-PC 06:35:33

06:35:33 [**] An attempt was made to change a user account's password. [Action: Success] [Event Count: 1] [Account Name: HRManager-PC] [Account Domain: Olympics.com] [**]

Multiple servers shut down Success High ITManager-PC 19:55:03

19:55:03 [**] Primary servers have been shut down successfully. The shutdown of the servers can put the computer at greater risk of network attacks or expose the computer to potential security risks. [Event Count: 20] [**]

Rules

Rule Name