M86 Security M86 Threat Analysis Reporter, Руководство пользователя

Страница: 842 / 938

R
EAL
T
IME
R
EPORTS
S
ECTION
C
HAPTER
5: I
DENTIFY
U
SERS
, C
ATEGORIES
814
M86 S
ECURITY
U
SER
G
UIDE
Specify Search Criteria
1. In the Users accordion, do one of the following:
• To identify users with the highest scores - Click the All
Users checkbox to select all users in the list and to
grey-out the list.
• To identify the activities of a specific user - Select the
user name/IP address from the list to highlight it.
2. Click the Available Categories/Groups accordion to open
it.
3. Select either the URL Categories or Bandwidth Cate-
gories tab to display its list of library categories/proto-
cols, and do either of the following:
• To identify library categories or protocols with the
highest scores - Select a category group or protocol
that includes as many of categories/ports as possible.
• To identify activities for a specific class/group - Select
that class or group.
For bandwidth gauges, to query activities for a specific
port number, click the
Port Number checkbox to acti-
vate the port field and to deactivate the listed band-
width protocol selections. Type a specific value in the
pre-populated field, and/or use the up/down arrow
buttons to increment/decrement the current value by
one.
4. Use the Timespan (Minutes) slider to specify the time
period in which the threat(s)/group(s) were accessed:
last 10, 20, 30, 40, 50, 60 minutes.
5. If a user selection other than “All Users” was specified in
the Users accordion, the Top Results slide becomes
activated and you can make a selection for the maximum
number of records to return in the results for that user:
top 10, 20, 30, 40, 50, 60, 70, 80, 90, 100 records.