Entities are the objects that form the basis of security events. From the
Cases page, click an entity to be redirected to the Entity Explorer
page.
The Entity Explorer page gives you insights into:
The entity's case involvement over the last three months, which may differ from
the side drawer's detail. For example, a URL marked as suspicious = true and highlighted in red
in the side drawer, might appear here as false if this same URL is
defined according to different criteria in other cases.
Basic information about the entity and enriched data gathered from different
cases.
Linked entities, such as users and IP addresses.
The frequency of each type of case.
A list of log entries.
To expand or collapse each category, click either
keyboard_arrow_down
Down Arrow or
keyboard_arrow_up
Up Arrow next to the
category name.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-25 UTC."],[[["The Entity Explorer page provides a comprehensive view of an entity's involvement in security cases within the last three months."],["This page displays details about an entity, including basic and enriched information gathered from various cases."],["You can see linked entities, such as users and IP addresses, associated with the selected entity."],["The Entity Explorer shows the frequency of each type of case the entity has been involved in, along with a list of associated log entries."]]],[]]