Skip to main content

Dashboards and Charts

The Visual Analytics feature comes with predefined dashboards and charts.

Predefined Dashboards​

The following dashboards are available by default.

Executive Risk Summary​

View the summary of your organization's insider risk and data exposure. This dashboard gives you a breakdown of the policy violations based on users and timelines, sensitive data at risk, and the sources and destinations of the sensitive data flow. You can filter the dashboard on the following parameters.

  • Time range
  • User search
  • Dataset filter
  • Policy filter
  • Source location type
  • Action was blocked?
  • Event type
  • Dataset sensitivity
  • Policy severity

Generative AI Summary​

View the daily risk score associated with your sensitive data flowing into AI tools. This dashboard gives you a breakdown of the generative AI tools being used, the data flowing through these tools, and the corresponding users responsible for the data transfer. You can filter the dashboard on the following parameters.

  • Time range
  • User search
  • Dataset filter
  • Policy filter
  • Source location type
  • Action was blocked?
  • Event type
  • Policy severity
  • Dataset sensitivity

Printer Exfiltration Summary​

View the summary of policy violations using printers. This dashboard gives you a breakdown of the policy violations based on timelines, datasets, users, and printers. At the bottom of the dashboard, the table provides all the events related to the print jobs sent to printers during the selected time range. You can filter the data based on the following parameters.

  • Time range
  • User search
  • Dataset filter
  • Policy filter
  • Source location type
  • Action was blocked?
  • Event type
  • Policy severity
  • vDataset sensitivity
  • Destination location type

Removable Media Exfiltration Summary​

View the summary of policy violations using removable media. This dashboard gives you a breakdown of the policy violations based on risk scores, timelines, datasets, users, and removable media devices. At the bottom of the dashboard, the table provides all the events related to the removable media devices during the selected time range. You can filter the data based on the following parameters.

  • Time range
  • User search
  • Dataset filter
  • Policy filter
  • Source location type
  • Action was blocked?
  • Event type
  • Policy severity
  • Dataset sensitivity
  • Destination location type

Cloud App Exfiltration Summary​

View the summary of policy violations using cloud apps. This dashboard gives you a breakdown of the policy violations based on risk scores, timelines, datasets, users, and cloud apps. At the bottom of the dashboard, the table provides all the events generated by user activities on cloud apps during the selected time range. You can filter the data based on the following parameters. Time range

  • User search
  • Dataset filter
  • Policy filter
  • Source location type
  • Action was blocked?
  • Event type
  • Policy severity
  • Dataset sensitivity
  • Destination location type

Website Exfiltration Summary​

View the summary of policy violations using websites. This dashboard gives you a breakdown of the policy violations based on risk scores, timelines, datasets, users, and websites. At the bottom of the dashboard, the table provides all the events generated by user activities on websites during the selected time range. You can filter the data based on the following parameters.

  • Time range
  • User search
  • Dataset filter
  • Policy filter
  • Destination domain
  • Source location type
  • Event type
  • Action was blocked?
  • Policy severity
  • Dataset sensitivity
  • Destination location type

Email Exfiltration Summary​

View the summary of policy violations using email. This dashboard gives you a breakdown of the policy violations based on timelines, datasets, users, and destination email domains. At the bottom of the dashboard, the table provides all the events related to emails with attachments during the selected time range. You can filter the data based on the following parameters.

  • Time range
  • User search
  • Dataset filter
  • Policy filter
  • Destination domain
  • Source location type
  • Action was blocked?

User Summary​

View the summary of policy violations by a specific user. Using this dashboard, you can review user activities and identify user patterns and behavior. This dashboard gives you a breakdown of the policy violations based on timelines, datasets, and user activities such as uploads and copy/paste on various egress channels like web, email, removable media, etc. Each source location type includes a table with a list of all the events generated by the user for the selected time range. You can filter the data based on the following parameters. User search

  • Time range
  • Policy severity
  • Dataset sensitivity
  • Policy filter
  • Dataset filter
  • Destination type
  • Source location type
  • Action was blocked?
  • Event type

Policy Summary​

View the policy violations summary. You can review violations to gather insights into exfiltration and identify threats. This dashboard gives you a breakdown of the policy violations based on risk scores, timelines, users, and datasets. You can filter the data based on the following parameters.

  • Time range
  • User search
  • Policy filter
  • Dataset filter
  • Source location type
  • Destination location type
  • Was the event blocked?
  • Event type
  • Policy severity
  • Dataset sensitivity

Endpoint Sensor Resource Usage​

View the Sensor resource usage on your endpoint devices to evaluate their performance. This dashboard presents insights from the platform's comprehensive analysis of the Sensor's impact on endpoint devices. The performance of Sensors is classified into three categories based on CPU and memory usage thresholds:

Green: Asensor is classified as green if its CPU usage stays below 20% and its memory usage remains under 2 GB throughout a 10-minute period.

Yellow: A sensor is classified as yellow if it exceeds the CPU usage threshold of 20% or the memory usage threshold of 2 GB once or twice within the same 10-minute period.

Red: A sensor is marked as red if it exceeds the CPU or memory usage thresholds more than twice during the 10-minute period.

You can filter the data based on the following parameters.

  • Hostname
  • Version
  • OS
  • Trends time range
  • Trends group by
  • Detailed time range

Endpoint Sensor Resource Usage Stats​

View the detailed stats of Sensor resource usage with this dashboard. It provides insights into CPU and memory usage trends, segmented by operating system type and tracked over time. The platform collects P99 telemetry to monitor Sensor performance under peak conditions. This dashboard includes a table highlighting key performance metrics from the P99 telemetry.

P50 (50th percentile): Shows the resource usage when the sensor is functioning under normal conditions. For example, if the CPU % P50 for an endpoint is 5%, it indicates that the CPU usage was 5% or less for half of the observed time.

P90 (90th percentile): Shows resource usage during higher than-average conditions. For example, if the CPU % P90 is 5%, it indicates that the CPU usage stayed at or below 5% for 90% of the time, with only 10% of the time experiencing higher usage.

P99 (99th percentile): Shows resource usage during peak or near-maximum load conditions. For example, if the CPU % P99 is 5%, it indicates that the CPU usage stayed at or below 5% for

99% of the time, with only 1% of the time exceeding this level.

Cloning a predefined dashboard​

You can clone a predefined dashboard using Save As.

To clone a predefined dashboard,

  1. Log into the Cyberhaven tenant.

  2. On the Dashboards page, click on a predefined dashboard to open it. 3. On the top right corner of the page, click on the More icon (... ) and select Save As .

  3. Enter a name for the dashboard and click Save.

  4. Click on Dashboards at the top of the page to view the newly created dashboard.

The new dashboard will include all the predefined filters from the predefined dashboard.

Creating a new dashboard​

To create a new dashboard,

  1. On the Dashboards page, click the

  2. Select a chart from the panel on the right side of the page. Then drag and drop the chart on the page.

  3. When finished, click Save to save the charts to the dashboard. The new dashboard is displayed on the Dashboards page.