Use Case Overview
Industries and security use cases supported by SentriaOne xSIEM, and where to find the related features in the dashboard.
Threat Detection
Using SentriaOne xSIEM to detect, investigate, and respond to known and unknown threats.
How to analyze top affected internal IPs
Step-by-step example of hunting from the Affected Internal IPs card — identifying the detection, analyzing participants, verifying records, and tracking the outcome.
How to analyze a detection
Step-by-step example of analyzing a single detection directly from the Detections page — Confirmed C2 Beacon With Lateral Movement.
Network Visibility
Using SentriaOne xSIEM for east-west and north-south traffic visibility, application performance, and network performance monitoring.
How to find who accesses a website
Step-by-step example of finding which internal hosts access a domain such as facebook.com — from Activity › DNS down to the records and the asset profile.
How to troubleshoot slow connections
Network Performance Monitoring use case — use TCP health, retransmissions, latency, and connection states to find out whether a slow application is caused by the network, the server, or something else.
How to build a custom dashboard
Step-by-step guide to building a custom dashboard in SentriaOne xSIEM — folders, dashboard settings, widgets, chart types, layout, and sharing.
Compliance
Using SentriaOne xSIEM to support audit readiness with centralized log management, data retention, reporting, and dashboard analytics.