๐Graph Analysis
Last updated
Last updated
Teiren SIEM offers two types of graph analysis - User Analysis and IP Analysis.
This analysis allows you to view all accounts registered with the applications, including AWS and TEIREN SIEM accounts.
The details presented include the account's resource, account name, detection count, most recent detection, recent event, and the time of the recent event.
By opening the 'Graph Details' modal of an account, you can see the detected flow of events associated with that account, as identified by the rule sets. In another tab, you can view each detection in a table format, with each detection's threat alert linking to the Threat Alerts detail page for more information.
This analysis provides a view of the network traffic for each resource registered with TEIREN SIEM. It presents a comprehensive picture of network interactions, helping users understand their network patterns better and detect any anomalies.
By providing both User Analysis and IP Analysis, our Graph Analysis feature offers a comprehensive and visual way of understanding your log data and any potential threats.