Learn to work with records about data, apps, websites, and users.
Working with records, viewing them, and gaining important info from them is simple and intuitive in Safetica ONE 11.
In this article, you will learn more about:
- Filters in Safetica ONE 11
- The date picker
- The user tree
- Charts and tiles
- Grouping of records
- Customizing visible columns
- Sorting columns
Filters in Safetica ONE 11
You can filter records related to data, apps, websites, or users based on many things, such as destination, file size, the action taken by protection policies, the application used, and many others.
These filters are temporary so that when you leave the section, they are cleared.
Example: Find if there were any attempts to copy files to USB drives that were blocked by protection policies. This will help you see whether there were any potential attempts to leak data.
Date picker
Via the date picker, you can select a specific time period (from Last 24 hours up to Last year).
This filter is persistent. It remains set even after you visit a different section.
Example: Filter out the Design team and then change the time picker to Last 30 days. See how the record table changes.
User tree
You can choose which user, team, or devices to display in the table. You can search for them in the user tree either by finding them manually or by entering their names into the search bar.
A team where all users/devices are selected is visualized with a checkmark. A group where only some are selected is visualized with a minus sign.
This filter is persistent. It remains set even after you visit a different section.
Example: Find Holly Wood and Nikki Wilkinson.
Charts and tiles
Charts and tiles present data in easy-to-consume form. Most of them can be clicked to filter out interesting info.
Example: See all events that were blocked by policies.
Example: See if users worked with any personal data, if any events with personal data were blocked, and how much data matched the Personal data classification.
Example: List all users by how much they violate protection policies.
Grouping of records
Grouping serves to streamline the visualization of filtered records. It is most flexible in the Data and Behavior sections.
You can group records based on many columns, e.g. based on user, application, destination type, etc. Afterward, you can sort the groups by name, size, or the number of records.
Example: See to what destinations were most operations targeted, and to what destinations was the biggest amount of data transferred.
The Apps and Websites sections are more predefined. The records are grouped by default within individual tabs, i.e. they are grouped by:
- Applications/Websites
- User – records are grouped by username. Sort the displayed groups via the Group by button by Active time, Number of records, or alphabetically by Sorting changes the Sum values and the order of the users.
- App/Web category - records are grouped by App/Web categories. Sort the displayed groups via the Group by button by App category, Active time, Number of records, or alphabetically by Sorting changes the Sum values and the order of the app/web categories.
- Blocked activity – in this tab, you can see the records of blocked applications/websites and the policies that triggered the blocking.
Customizing visible columns
You can add or hide columns based on your needs via the column picker. You can also change their order or size.
The Reset to default link in the column picker resets the table columns into their default state.
The Refresh button refreshes the whole page (i.e. data in the table).
Sorting columns
Some columns can be sorted – not all, however, only those where it makes logical sense.
You can create a virtual report by bookmarking the URL of a page with set filters.
Read next:
How to create a virtual report