Navigating Your Threat Analytics Portal

Close Up Programmer Man Hand Typing Keyboard Input Code

When it comes to logging into any SOC-as-a-Service (SOCaaS) portal most of us try to grab what info we need and spend as little time in the portal as possible. One of the benefits of having an automated threat analytics portal is that you shouldn’t need to invest a huge amount of time to review the data in the portal. Have you ever stopped to wonder what you are missing by doing this? Every SOCaaS provider has different dashboard, however there are several items that should always be included. Below you’ll find a quick reference guide on AgileBlue dashboard, what to look for and what it means to you.

image of agileblue socaas portal

  1. Risk Score – Organization’s credit score, only difference is you want the lower number here. Over a dozen algorithms are used to calculate specific to your network.
  2. Alerts breakdown – AgileBlue’s SOC is 24×7 so you don’t have to be, see what they’re up to at any time of the day.
  3. Monitored Devices – On prem, remote, or in the cloud…wherever the device is we can monitor it and here is where you track it.
  4. Monitored Applications – O365, SaaS, or custom applications…we have your data covered no matter where it sits.
  5. Alerts by time – Spikes in alerts, coincidence or actively being targeted? See day-over-day activity in a quick glance.image of agileblue socaas portal
  6. Alerts by Type – Mapped to Mitre framework, see what threats actors are trying to do to get into your network.
  7. Alerts by Criticality – Threat actor or bad hygiene? Alert criticality can help determine where adjustments need to be made in policies or the network.
  8. Recent Alerts – Quick glance of your most recent alerts

 

Interested in a more detailed tour of the AgileBlue dashboard? Request a demo with us.

Written by Gillian Sweny

Gillian is Director of Marketing at AgileBlue with over 13 years of experience in the marketing industry. Gillian resides in Cleveland, OH with her husband and 3-year-old son.

June 10, 2021

You May Also Like…

What is SOAR?

What is SOAR?

Already stretched thin, security teams often need help with the overwhelming volume of alerts and incidents they must manage daily. This level of data can lead to slower response times, missed...

read more

Request a Demo

AgileBlue is a software company with an innovative SOC-as-a-Service for 24X7 network monitoring, cloud security, data privacy and compliance.

Our modern SOC-as-a-Service is built on innovative machine learning and autonomous execution. If you would like to discuss our SOC-as-a-Service, Partner Program or schedule a brief demo please give us a little info and we will contact you immediately.