Sessions

The Session tab displays all Sessions information associated with samples from your network. Click the column headers to sort sessions in ascending (up arrow) or descending (down arrow) order.
The session data displayed in the search results include all relevant data submitted to WildFire through your organization's various product integrations where available; however, session data availability is not contingent on membership to other services, such as Panorama, Cortex Data Lake, or other Palo Alto Networks products.
Session Details
After performing an AutoFocus Search, select
Sessions
and select a single session to drill down for session details:
search-session-tab.png
Display sessions based on the Upload Source. Add the search condition
Upload Source
is
to your current search and choose a session source. In the example above, the sessions search results have the Upload Source
Firewall
, which means that they are sessions associated with samples submitted to WildFire from your connected firewall.
postit1.png
Activity details include a
Session Summary
, from which you can add artifacts to your existing search or launch a new search for an artifact in a separate browser window.
postit2.png
The
File Analysis
tab displays artifacts that WildFire found in the sample detected during the activity session (see Sample Details for information on the File Analysis tab).
postit3.png
Activity details also include a list of
Related Sessions
, which are other sessions during which the same sample was detected.
Next Steps...

Recommended For You