Viewing Threat Reports in the Attacker or Attack Target Dimension

Viewing Reports

You can view the threat reports in the attacker or attack target dimension by clicking the Attacker/Attack Target tab. The methods for viewing the threat reports in the attacker and attack target dimensions are the same. This section uses the attacker dimension as an example to describe how to view threat reports.

If Unknown is displayed in Casualty Region, the attacker is not added to the specified region.

The attacker can be a user or the IP address bound to the user. If is displayed in Attacker, the attacker is a user but not the IP address bound to the user.

Customizing Generated Reports

You can narrow the search range to view top rankings of the number of threats in a specific dimension using the advanced search function. To customize generated reports, specify one or more search conditions in Add Filter, and click Refresh.

For example, you can view top N virus threats generated by an attacker. The following figure shows the specific operations and displayed information.

Drilling Threat Statistics in the Threat Name or Attack Target Dimension

The threat reports in the attacker dimension support secondary drilling the threat name and attack target. You can click the data link to drill the threat trend in the threat name or attacker dimension.

The threat reports in the attack target dimension support secondary drilling the threat name and attacker. This section uses the attacker dimension as an example to describe how to perform secondary drilling.

For example, if a large number of threats caused by an attacker match the security policies, you can view the number of threats initiated by this attacker based on the threat name. The following figure shows the specific operations and displayed information.