FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
FortiKoala
Staff
Staff
Article Id 194201
Description

What does the Reports tab show me


Scope

FAQ


Solution

The Reports tab within ZoneFox has a dropdown with four key types of report;


Forensic Activity provides an overview of all the activity recorded by ZoneFox including; 


  • summary accounts of endpoints, users, applications, files, folders and activities
  • lists of the most seen applications and users


Alerts gives an overview of all alerts fired by ZoneFox, including;


  • the number of users who have breached policies
  • the number of policies that have been breached, and
  • a breakdown of how many alerts have been fired by each policy, or associated with specific tags


Data Flow provides an overview of;


  • how much data has been transferred into and out of your network, including the users and countries involved
  • a breakdown of the most seen file extensions to give you an idea of what types of data are being transferred
  • a daily breakdown of data transfer


Applications gives an overview of the key categories of application that have been seen in your network.


Contributors