Users

In the Users panel, you can view per user details on risk level, most recent activity, alerts, and also other details.

1
Risk: Displays the risk level of the user.
2
User: Displays the name of the end-user. Click a specific user name to view the time line of user alerts and display the User insights panel.
3
Encrypted user: Displays the encrypted name of the user.
4
Top categories: Displays the top category in which the user had the most alerts. Click on the + icon to see full breakdown of the categories.
5
Total alerts: Displays the total number of alerts for the user.
6
User type: User can be a domain user or a local user.
7
Department: Displays the work department of the user.
8
Job title: Displays the job title of the user.
9
Column selector: Used to configure which columns to display in the table. Risk and User always display in the table; all other columns can be hidden.
10
Search: Allows you to find a specific user by their name.
For users logged in as analyst, the following fields will be anonymized:
  • User
  • User type
  • Department
  • Job title

User activity details can also be exported to a CSV report using the icon. For more details refer the section Export data from Forcepoint Neo portal.