Applies To: ThreatSync+ NDR, ThreatSync+ SaaS
The Monitor menu in the ThreatSync+ UI is where you monitor your network, review Smart Alerts and policy alerts, monitor devices, monitor user activity, and view policy and zone logs.
Available pages and features vary and depend on your license type. Throughout this documentation, ThreatSync+ refers generally to all products. If you do not see a page or feature in the ThreatSync+ UI, it is not supported by your product.
Network Summary
The Network Summary Page opens by default when you select Monitor > ThreatSync+.
This page provides an overview of your network and includes information about your subnets and organizations, zones, and devices. For more information, go to About the ThreatSync+ Summary Page.
Smart Alerts
The Smart Alerts page shows open Smart Alerts for operators to review and respond to. For more information, go to About Smart Alerts.
Policy Alerts
The Policy Alerts page shows a list of policy violations for you to review and investigate. For more information, go to About Policy Alerts.
Users
The Users page shows a list of users and user activity associated with a ThreatSync+ SaaS integration. This page is only available with a ThreatSync+ SaaS license. For more information, go to ThreatSync+ Users and About ThreatSync+ SaaS Licenses.
Discover
The Discover page shows new devices or subnets on your network that ThreatSync+ detected. For more information, go to ThreatSync+ NDR Asset Discovery.
ThreatSync+ Audit Logs
The ThreatSync+ Audit Logs page shows logs for policy and zone configuration history on your network, IP addresses, users, SaaS collector logs, and Smart Alert Controls audit logs. For more information, go to ThreatSync+ Audit Logs.
Search Raw Logs
The Search Raw Logs page shows details about Microsoft 365 document and user access logs. This page is only available with a ThreatSync+ SaaS license. For more information, go to Search Raw Logs in ThreatSync+ SaaS and About ThreatSync+ SaaS Licenses.
All IP Addresses
The All IP Addresses page shows details about internal and external IP addresses. You can use the information on this page to view detailed information about IP address activity, device activity, view associated Smart Alerts and policy alerts, and you can perform block and unblock actions on specific external IP addresses. For more information, go to All IP Addresses.
About ThreatSync+ SaaS Integration — Microsoft 365