Views:
The following table describes the basic information Workbench provides about Workbench insights.
Element
Description
Score
The score that Trend Vision One assigns to the insight based on the total scores from related alerts
Insight ID
A unique identifier for the insight
Insight name
The name of the insight
Last updated
The date and time Trend Vision One last updated the insight and the last update status
  • New alert correlated: Trend Vision One correlated an alert with the insight.
  • Insight merged: Trend Vision One merged multiple insights.
  • Alert removed: A user manually removed one or more alerts from the insight.
  • Alert added: Trend Vision One added one or more alerts to the insight.
  • Older alert data no longer available: Trend Vision One removed one or more expired alerts (older than 180 days) from the data log.
Associated alerts
The total number of related alerts and the number of active alerts associated with the insight
Note
Note
An alert can only be associated with one insight.
Impact scope
The number of entities that the insight affects within the company network
Created
The date and time Trend Vision One generated the insight
Owner
The Trend Vision One accounts in your organization assigned to the insight
The following table describes the alert information displayed on the alert details screen.
Element
Description
Workbench Insights alerts
Detailed information about the insight and the list of alerts included in the insight
Insight Timeline
Timeline of the insight as well as the root cause, lifecycle, and impact scope of an insight
Impact Scope
List of entities affected by the insight
Highlighted Objects
Trend Vision One analyzes highlighted objects to correlate alerts.
Select one or more highlighted objects and choose a response action to take on the objects.
Gmail only supports the Delete Message response action.
Attack phase
MITRE tactics detected in the insight
Related information