Risk Dashboard

Risk Dashboard

The risk dashboard displays both current and historic risks based on the overall amount of PII data discovered on each endpoint. Risk is automatically updated each day when the endpoint completes a reindex of information. 

Using the Risk Dashboard

Current Risk

The current risk grid displays the most recent risk for each endpoint. The numbers at the far left (Y-Axis) show the Raw Risk Score. The raw risk score is a sum of risk scores of all files containing risk. See Risk Score Calculation for details on how risk is calculated.

If you hover your cursor over an endpoint's stacked bar chart you will see the current risk name along with its overall score. You will also see a percentage breakdown of the type of risk and percentage Heureka's classification engine found during the last reported scan. 

Selecting Endpoints and using the show Top Number filter

By default your system shows the top 25 endpoints with the highest risk score. You may change the number of endpoints displayed in the current area by clicking on the "Show" dropdown. You can select the top 10, 25, 50 and 75. Interrogate will not show more than 75 endpoints at a time. 

You may want to focus your investigation on just a few endpoints at a time. You may click on any endpoint or combination of endpoints stacked bar chart to select. The Last 30 Days and Tags by Count area will automatically adjust to display information for only the selected endpoint(s).Once selected, you may choose the "only selected" from the show drop-down and only the selected endpoints will appear in the current display. 

To reset the selected endpoints, simply choose "top 25" or another "top" selection and the current endpoints area will reset. If you select "none", the endpoints will be cleared out allowing you to individually select endpoints from the bottom Endpoints grid using the traditional checkboxes.

Last 30 Days (Historical)

Heureka keeps a running history of total risk across a 30 day time period. This at-a-glance chart displays historical risk and makes it easier for you to monitor your risk.

The average line shows you what your average risk score is over the 30-day period. The trend line give you a general sense of whether your risk has been trending upward or downward over the 30-day period.

When you hover your cursor over a single day, you will see an average daily risk score for all endpoints that checked in.

Selecting an endpoint

When you click your mouse on any endpoint, that endpoint will be selected and all endpoints checking in with data for that day will be displayed in the "current risk" area. 

You may select "Reset" on the header to reset all of your endpoints to the default.

Risk by Type

Heureka breaks down risk by card type and social security. As you hover over the areas of the donut chart, you will see the percentage of card types and social security numbers. The percentage display represents the current risk.

Endpoint View

The bottom grid represents all of the endpoint services available to the system. You will note that there is a checkbox on the right side of each endpoint service. The endpoint view grid is interactive with the risk by type and current risk grid. In other words, as you select or deselect endpoints, the current and risk by type charts will interactively update themselves to display the information for the selected endpoints.

Create Search from Selected Endpoints

If you have selected specific endpoints and would like to run a search for file-level patterns, you may click on the create search from selected endpoints button in the upper right corner. You will be asked to select which job you would like the search to be placed in and then directed to the Search Criteria page. If you only want to see the patterns auto-detected by Interrogate, simply click the search and create a name.

Next - Jobs View