Monitor Users

In addition to responding to incidents, analysts can also monitor and research activities associated with specific users.

To monitor users:

1. In the main menu, click the Users tab, and then click Highlighted Users.
   The Highlighted Users screen appears.
   Highlighted users are organized into three columns:

   Column Name	Column Description
   Notable	Users that have the highest score.
   Watched	Users manually marked as watched because of a potential compromise or because they have exhibited suspicious behavior.
   Critical	Users who need to be monitored more closely because they are critical to the organization (for example, VPs or high-level executives).

2. To view the details of a specific user, click the User.
   The User Details screen appears.
   The following table lists the sections displayed on the User Details screen with the location and a brief description.

   Section	Location	Description
   User Directory and User Score	Upper left-side	Contains the user's picture, name, position, and contact information. Also shows the user's MistNet NDR severity score and number of incidents associated with the user.
   User Score Time Chart	Upper right-side	Displays the user's score progression over time.
   User Activity	Lower half	Contains a graph of the user's security events over time and a searchable list of the user's activity.