Views:
The following table describes the basic information Workbench provides about Workbench insights.
Element
Description
Score
The score that Trend Vision One assigns to the insight based on the total scores from related alerts
Insight ID
A unique identifier for the insigh
Insight name
The name of the insight
Last updated
The date and time Trend Vision One last updated the insight and the last update status
  • New alert correlated: An alert was correlated and associated with the insight
  • Insight merged: Trend Vision One created the insight merging multiple insights
  • Alert removed: One or more alerts were manually removed from the insight
  • Alert added: One or more alerts were manually added to the insight
  • Older alert data no longer available: One or more alerts older than 180 days have expired and were removed from the data log
Associated alerts
The total number of related alerts and the number of active alerts associated with the insight.
Note
Note
An alert can only be associated with one insight.
Impact scope
The number of entities that the insight affects within the company network
Created
The date and time Trend Vision One generated the insight
Owner
The Trend Vision One accounts in your organization assigned to the insight
The following table describes the alert information displayed on the alert details screen.
Element
Description
Alerts (Workbench Insights)
Detailed information about the insight and the list of alerts included in the insight.
Insight Timeline
Displays the timeline of the insight, and the root cause, lifecycle, and impact scope of an insight.
Impact Scope
The list of entities affected by the insight.
Highlighted Objects
The list of highlighted objects from the associated alerts. Trend Vision One analyzes highlighted objects to correlate alerts.
Note
Note
  • You can select one or more highlighted objects and choose a response action to take on the objects.
  • Gmail only supports the "Delete Message" response action.
Attack phase
The MITRE tactics detected in the insight.
Related information