Investigate user assets associated with your cases.
Drill down on a user in the User Risk View or the User View. In this view Cortex Cloud aggregates all of the data collected for a user, displays the information in graphs and tables, and provides further drilldown options for easy investigation. Cortex Cloud uses Identity Analytics to aggregate information on a user and displays insights about the user.
You can take the following actions to investigate a user:
Assess the user's behavior and score.
Star the user to be included in the watchlist.
Right-click a user name and select Open User Card.
Tip
You can also see a list of all users under → → .
Select the timeframe to view the user's details.
Note
Cortex Cloud normalizes and displays case and issue times in your time zone. If you're in a half-hour time zone, the activity in the Issues & Insights Heatmap is displayed in the whole-hour time slot preceding it. For example, if you're in a UTC +4.5 time zone, the time displayed for the activity will be UTC +4.5, however, the visualization in the Issues & Insights Heatmap will be in the UTC +4 slot.
Investigate the user.