Risk Exposure dashboard reference

Overview

The Risk Exposure dashboard provides a look into the different types of file activity occurring across your Code42 environment, including high risk and departing employees as well as employees that have the most file activity. Use this dashboard to quickly identify when unusual activity is happening so that you can investigate further. 

This article provides an overview of the Risk Exposure dashboard and links to learn more about each of the major areas. 

Considerations

• Add Trusted Domains in Data Preferences to hide file events that occur on domains you trust. Adding trusted domains helps focus your investigation on file activity that may be a higher risk. File activity on a specific domain is only considered trusted starting the date the domain was added. You can view all file activity, including events that occur on your trusted domains, in Forensic Search.

• To use this functionality, Incydr users must be assigned specific roles. For more information, see Roles for Incydr. To learn which permissions on Incydr roles allow use of this functionality, see Permissions for Incydr. If you use other Code42 products, see Role assignment use cases.

• Feature visibility:

  • This functionality is available only when supported by your product plan. Contact your Customer Success Manager (CSM) for assistance with licensing, or to upgrade to the Incydr Advanced product plan for a free trial​​​. If you do not know your CSM, please contact our Customer Champions.

  • The risk detection list summaries require a product plan that includes Risk Detection lenses.

  • You must connect at least one cloud service to Code42 to see cloud-related file activity. 

• Contact your Customer Success Manager (CSM) for assistance with licensing. If you don't know who your CSM is, email csmsupport@code42.com. 

The Risk Exposure dashboard

To view, sign in to the Code42 console. Click the logo in the upper-left to return to the Risk Exposure dashboard at any time. 

Click one of the links below for more information about that corresponding area:

1. Risk detection list summaries -  employees on a risk detection list that have recently had possible exfiltration events
2. Top users by file activity - list of users with the most file activity across your Code42 environment
3. Destination activity over time - all of the file events that occurred across your organization by destination
4. File categories - all of the file events that occurred across your organization by file category group

Related topics

• Review unusual file activity with the Risk Exposure dashboard
• Enable endpoint monitoring and file metadata collection
• Enable endpoint monitoring and file metadata collection 
• Endpoint dashboard reference