Cisco Cisco FirePOWER Appliance 7115

Seite von 2442
Version 5.3
Sourcefire 3D System User Guide
1451
Working with Discovery Events
Understanding Discovery Event Workflows
Chapter 35
When you are using a network discovery workflow, you can perform many 
common actions, whatever the type of event. These common functions are 
described in the 
Common Discovery Event Actions 
T
O
...
Y
OU
 
CAN
...
view the host profile for an IP address
click the host profile icon (
) or, for hosts with active 
indications of compromise (IOC) tags, the compromised host 
icon (
) that appears next to the IP address. For information 
on IOC, see 
view user profile information
click the user icon (
) that appears next to the user identity. 
For more information, see 
sort data
click the column title. Click the column title again to reverse 
the sort order.
drill down to the next page in the 
workflow
use one of the following methods:
• To drill down to the next workflow page constraining on a 
specific value, click a value within a row. Note that this only 
works on drill-down pages. Clicking a value within a row in 
a table view only constrains the table view and does not 
drill down to the next page.
• To drill down to the next workflow page constraining on 
some events, select the check boxes next to the events 
you want to view on the next workflow page, then click 
View.
• To drill down to the next workflow page keeping the 
current constraints, click View All.
TIP!
 Table views always include “Table View” in the page 
name.
For more information, see 
constrain the columns that appear
click the close icon (
) in the column heading that you want 
to hide. In the pop-up window that appears, click Apply.
TIP!
 To hide or show other columns, Select or clear the 
appropriate check boxes before you click Apply. To add a 
disabled column back to the view, click the expand arrow to 
expand the search constraints, then click the column name 
under Disabled Columns.
navigate within the current workflow 
page
find more information in