The Mandiant Hunting dashboard provides insight into the leads that Mandiant Threat Defense finds while conducting Threat Hunting operations. This dashboard helps users understand what is being found during Threat Hunting activities. The dashboard breaks down the leads found in hunting rules by various dimensions, demonstrating trends and remediation opportunities.
The Mandiant Hunting dashboard is a curated dashboard that is available through the Google SecOps platform.
Access the Mandiant Hunting dashboard in Google SecOps
- Access Google SecOps.
- Navigate to Dashboards & Reports > Dashboards.
- Select the Mandiant Hunting dashboard from the list of Dashboards.
You can search for this dashboard.
Mandiant Hunting dashboard overview
The curated Mandiant Hunting dashboard has the following widgets:
- Total events ingested
- Detections
- Mandiant Hunt detections over time
- Detections by platform
- Detections by telemetry source
- Detections by event type
- Top 10 MITRE ATT&CK techniques (log scale)
- Top 100 rules by detection count
- Top 100 hosts by detection count
- Top 100 assets by detection count
- Top 100 users by detection count
- Top 100 domains by detection count
For more information about Google SecOps dashboards, see Google Cloud's Dashboards overview documentation.