Reference Guide

Navigate the Dell Server

Manage Enterprise Advanced Threats

Advanced Threats tab

If the Advanced Threat Prevention service is provisioned and licenses are available, the Advanced

Threats tab provides a dynamic display of detailed events information for the entire enterprise, including

a list of the devices on which events occurred and any actions taken on those devices for those events.

For information about provisioning the service, see Provision Advanced Threat Prevention Service

To access the Enterprise Advanced Threats tab, follow these steps:

1. In the left pane, click Populations > Enterprise.

2. Select the Advanced Threats tab.

Information about events, devices, and actions are organized on the following tabs:

Protection

- Lists potentially harmful files and scripts and details about them, including the devices on

which the files and scripts are found.

Agents - Provides information about devices running the Advanced Threat Prevention client as well as the

option to export the information or remove devices from the list.

Global List - Lists files in the Global Quarantine and Safe list and provides the option to move files to

these lists.

Options - Provides a way to integrate with Security Information Event Management (SIEM) software using

the Syslog feature as well as export Advanced Threat data.

Certificate - Allows certificate upload. After upload, certificates display on the Global List tab and can be

Safe listed.

Tables on the tabs can be organized in these ways:

Add or remove columns from the table - Click the arrow next to any column header, select Columns, then

select the columns you want to display. Clear the check box of columns to hide.

Sort the data - Click a column header.

Group by a column - Drag the column header up, until it turns green.

Filter based on data of one column - click the down-arrow on any column to display the context menu, and

select Filter.

Advanced Threat Events tab

The Advanced Threat Events tab displays information about events for the entire enterprise based on

information available in the Dell Server.

The tab displays if the Advanced Threat Prevention service is provisioned and licenses are available.

To export data from the Advanced Threat Events tab, click Export and select Excel or CSV file format.

Note: Excel files are limited to 65,000 rows. CSV files have no size limit.

For a list of fields and filters on the tab, see Advanced Threat Events tab fields and filters

Domains