In addition to responding to incidents, analysts can also monitor and research activities associated with specific users.
To monitor users:
In the main menu, click the Users tab, and then click Highlighted Users.
The Highlighted Users screen appears.
Highlighted users are organized into three columns:
Column Name Column Description Notable Users that have the highest score. Watched Users manually marked as watched because of a potential compromise or because they have exhibited suspicious behavior. Critical Users who need to be monitored more closely because they are critical to the organization (for example, VPs or high-level executives).
To view the details of a specific user, click the User.
The User Details screen appears.
The following table lists the sections displayed on the User Details screen with the location and a brief description.
Section Location Description User Directory and User Score Upper left-side Contains the user's picture, name, position, and contact information. Also shows the user's MistNet NDR severity score and number of incidents associated with the user. User Score Time Chart Upper right-side Displays the user's score progression over time. User Activity Lower half
Contains a graph of the user's security events over time and a searchable list of the user's activity.