1. Expel Help Center
  2. Getting Started with Expel
  3. Activity

About Activity

The Activity tab shows you an overview of all security incident activity in your environment. You can sort and filter this page.

To open the Activity tab, click Incidents.

WB_Activity_Dashboard.png

 

In many screens in Workbench, you can download what you see as a CSV file. This is useful to move the content into other tools, such as Excel, for further analysis or charting, for example.

You can specify the dates for the content you want to download.

To download the content, locate the Download icon Icon_Download_CSV.png and click it. Specify the date range you want and click Download.

When you first open this page, you see all incident information sorted by most recent. You can change the view by using the lists at the top of the page to view specific statuses, or threat types, for example. Changing the assignments to see incidents assigned to you or to your organization is also useful. You can also search titles to find a specific incident.

 

You can see some details about any investigation in your environment. You see the threat level above the incident and the status of the incident in the charts on the left. You can also click Findings or Remediations under the charts to see more details. In the incident area on the right, you see threat type, the attack timing, the detection technology, and more. To see the specifics for an incident, click the name of the incident.

Related articles