SaaS Security Administrator's Guide
    : View All Threat Incidents
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. SaaS Security Administrator's Guide
    4. Behavior Threats
    5. View All Threat Incidents
    Download PDF

    SaaS Security Administrator's Guide

    View All Threat Incidents

    Table of Contents

    View All Threat Incidents

    The Incidents tab on the Behavior Threats page displays the threat incidents that Behavior Threats detected.
    The Incidents tab on the Behavior Threats page displays the threat incidents that Behavior Threats detected. Depending on how you set the time-range filter on the Behavior Threats dashboard, you can view up to 90 days of threat incidents.
    1. Navigate to the Behavior Threats dashboard.
    2. Navigate to Incidents.
    3. In the Incidents table, review the information about the threat incidents.
      The displayed information includes the name of the policy that describes this type of incident, the severity of the incident, the user whose actions caused the incident, and the date that the incident occurred. You can sort the Incidents table according to any of these attributes by clicking the appropriate column.
    4. (Optional) Add Filter to the table to view only the incidents for a particular severity, user, or situation type (such as a spike in activity).
    5. (Optional) To view more information about the policy or user associated with the incident, click the name in the Policy Name or User column of the table.
    6. (Optional) Click the table's download icon to export a CSV file with a list of the incidents. The list will contain all incidents unless you applied a filter to the table.

    © 2024 Palo Alto Networks, Inc. All rights reserved.