Operations Manual

The Operations Manual is broken down into two sections. Administration for SOC Analyst and Dashboards and Components for BDSA Engineering.

Operations Manual - Administration

• 1. Logging In and Getting Started
• 2. User Administration
  • 2.1. Managing Individual User Settings
  • 2.2. Using the User Dashboard
    • 2.2.1. Users by Group
    • 2.2.2. Locked Users
    • 2.2.3. User Administration Table
  • 2.3. Working with the User Dashboard
    • 2.3.1. Creating New Users
    • 2.3.2. Updating the Users
    • 2.3.3. Moving Users
    • 2.3.4. Exporting a User or Users
    • 2.3.5. Importing a User or Users
    • 2.3.6. Deleting a User or Users
• 3. Understanding Shards
  • 3.1. Working with Shards
    • 3.1.1. Viewing the Shards Dashboard
  • 3.2. Managing Shards
    • 3.2.1. Adding Shards
    • 3.2.2. Exporting Shards
• 4. Working with Reports
  • 4.1. Viewing the Reports Dashboard
  • 4.2. Selecting another Group for the Reports
    • 4.2.1. Managing Reports
  • 4.3. Creating New Reports
  • 4.4. Editing Existing Reports
  • 4.5. Moving Reports to another Group
  • 4.6. Exporting Reports
  • 4.7. Importing Reports
  • 4.8. Deleting Reports
    • 4.8.1. Scheduled Reports
  • 4.9. Viewing/Downloading Scheduled Reports
  • 4.10. Deleting Scheduled Reports
    • 4.10.1. Working with Report Templates
  • 4.11. Creating a New Report Template
  • 4.12. Exporting a Reports Template
  • 4.13. Importing a Reports Template
  • 4.14. Deleting a Report Template
• 5. Understanding the Archives
  • 5.1. Working with the Archives
    • 5.1.1. Viewing the Archive Dashboard
    • 5.1.2. Changing the Group for the Archive
  • 5.2. Using the Archive Manager
    • 5.2.1. Exporting Archives
    • 5.2.2. Deleting Archives
  • 5.3. Managing the Archive Profiles
    • 5.3.1. Creating Archive Profiles
  • 5.4. Archiving Events
• 6. Working with the Audit Log
  • 6.1. Exporting the Audit Log
• 7. Working with the Tools
  • 7.1. Using DNS Lookup
  • 7.2. Using WHOIS
  • 7.3. Using Traceroute
  • 7.4. Using Ping
• 8. Working with Search
  • 8.1. Working with the Search Manager
    • 8.1.1. Creating a New Search
    • 8.1.2. Displaying a Saved Search
    • 8.1.3. Exporting a Search
    • 8.1.4. Importing a Search
    • 8.1.5. Delete a Search
    • 8.1.6. Applying a Quick Search
    • 8.1.7. Applying a Saved Search
• 9. Understanding Scores
  • 9.1. Working with Scores
    • 9.1.1. Viewing the Scores Dashboard
    • 9.1.2. Change the Group on the Scores Dashboard
  • 9.2. Managing Scores
    • 9.2.1. Creating New Scores
    • 9.2.2. Updating Scores
    • 9.2.3. Moving a Score or Scores to Another Group
    • 9.2.4. Cloning Scores
    • 9.2.5. Exporting Scores
    • 9.2.6. Importing Scores
    • 9.2.7. Deleting a Score or Scores
  • 9.3. Creating Custom Scores
• 10. Working with Notifications
  • 10.1. Working with Notifications
    • 10.1.1. Viewing the Notifications Dashboard
    • 10.1.2. Selecting a Different Group for the Notifications
  • 10.2. Managing Notifications
    • 10.2.1. Creating Notifications
    • 10.2.2. Updating Notifications
    • 10.2.3. Exporting Notifications
    • 10.2.4. Importing Notifications
    • 10.2.5. Deleting Notifications

Operations Manual - Dashboards and Components