aktif
-
- Kritis00%
- Tinggi00%
- Sedang00%
- Rendah00%
| Endpoint | Status | Terakhir Terlihat |
|---|
Belum ada data agen.
Panduan langkah demi langkah penggunaan platform.
Modul Operasional
Tahapan Operasional Detail
Checklist Harian
Batasan & Eskalasi
Aksi Cepat
Alur sederhana: 1) pantau alert 2) klik Otomatis 3) eskalasi jika belum selesai.
| ID | Created | SLA | Host | Src IP | Sev | Rule | Status | Assignee | Summary | Action |
|---|
No queue data.
| Analyst | Open | Ack | Total Active |
|---|
Event Simulation (Optional)
No incident board data yet.
| Owner | Open | Ack | SLA Breach | Avg Age |
|---|
| Alert ID | Owner | Sev | SLA | Host | Summary | Action |
|---|
| Owner | Open | Ack | SLA Breach | Critical |
|---|
| Type | ID | Owner | Priority | Detail |
|---|
Fokuskan halaman ini untuk health host, ownership, dan tindakan operasional. Fitur manual lanjutan dipindahkan ke blok advanced agar layar utama tetap rapi.
Belum ada data agen.
| Endpoint | Status | Terakhir Terlihat |
|---|
No host selected.
| Event Time | Type | Sev | Message |
|---|
| Alert ID | Status | Sev | Summary |
|---|
| Case ID | Status | Owner | Title |
|---|
Agent Enrollment
| ID | Created | By | Expires | Uses | Revoked | Note | Action |
|---|
Belum ada token. Buat token enroll dulu.
Agent Heartbeat
No playbook run data yet.
| ID | Time | Action | Alert | Actor | Status | Detail |
|---|
| ID | Host | Type | Pri | Try | Timeout | Status | Requested | Completed | Summary |
|---|
Area ini dipisah menjadi blok inti dan blok advanced supaya tuning, korelasi, dan simulasi lebih mudah dibaca saat operasional.
| ID | Code | Name | Type | Min Sev | Enabled | Action |
|---|
| ID | Code | Name | Pair | Threshold | Window | Sev | Enabled | Action |
|---|
Advanced: Simulate Correlation
| ID | User | Role | Active | Last Login | Action |
|---|
No audit data loaded.
| ID | Time | Actor | Action | Detail |
|---|
Branding, UI Log, dan Demo Dataset

| Time | User | Action | Detail |
|---|
| Timestamp | Event ID | Host | Src IP | Type | Sev | Message |
|---|
| Status | Total |
|---|
| Top Rule | Alerts |
|---|
| Top Host | Alerts |
|---|
| Day | Total |
|---|
| Time | Host | Rule | Sev | Status | Summary |
|---|
| ID | Name | Freq | Enabled | Next Run | Action |
|---|
No report run data yet.
| ID | Schedule | Started | Status | By | Summary |
|---|
Kumpulkan IOC, korelasi ancaman, dan bukti intelijen untuk membantu deteksi serta prioritas investigasi.
Sumber Threat Intelligence
Bagian ini dipakai untuk mengelola feed IOC dan sumber intelijen yang akan dipakai sistem saat melakukan matching ke event dan host internal.
| Metrik | Nilai | Informasi |
|---|
Belum ada data ringkasan TI.
| Tipe | Indikator | Match | Host | First Seen | Last Seen | Sumber | Contoh Host |
|---|
| ID | Name | Type | Interval | Enabled | Last Sync | Action |
|---|
| ID | Type | Value | Sev | Conf | Source | Enabled |
|---|
| ID | Time | Host | Type | IOC | Sev | Alert |
|---|
Monitor and analyze compromised credentials from external breach sources.
Sumber Data Breach
Menu ini digunakan untuk memantau akun, email, atau domain organisasi yang muncul pada dataset kebocoran sehingga tim bisa menilai dampak dan melakukan reset kredensial lebih cepat.
| Title | Domain | Compromised | Breach Date | Data Types | Source |
|---|
Track dark web exposure, brand abuse, and attack surface findings from external sources.
Sumber External Exposure
Menu ini dipakai untuk melihat risiko dari luar perimeter seperti dark web mention, phishing/brand abuse, dan aset publik yang terekspos agar bisa segera ditindaklanjuti.
| Type | Title | Domain / Asset | Severity | Status | Last Seen | Source | Detail |
|---|
| ID | Title | Status | Owner | Alerts | Updated | Action |
|---|