SaaS Security Administrator's Guide
    : View the Users on the Watchlist
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. SaaS Security Administrator's Guide
    4. Behavior Threats
    5. View the Users on the Watchlist
    Download PDF

    SaaS Security Administrator's Guide

    View the Users on the Watchlist

    Table of Contents

    View the Users on the Watchlist

    In Behavior Threats, you can monitor a user more closely by adding them to the watchlist. You can filter the Users table to show only users in the watchlist.
    To track a particular user more closely, you can add them to the watchlist in Behavior Threats. To view all the users on the watchlist, you apply the
    Watchlist
     filter to the Users table.
    1. Navigate to the Behavior Threats dashboard.
    2. Navigate to
      Users
      .
    3. Add Filter
       to the table and add the
      Watchlist
       filter.
    4. Set the Watchlist filter to show only the users in the watchlist (
      Watchlist
      In Watchlist
      ).
    5. In the
      Users
      table, review high-level information for the users on the watchlist.
      The displayed information includes the user's risk score and the number of threat incidents associated with the user for the policy.
    6. (
      Optional
      ) Click the table's download icon to export a CSV file with a list of the users in the watchlist.
    7. To view more details for a user, including threat-incident details, click the name of the user.

    Recommended For You

    © 2024 Palo Alto Networks, Inc. All rights reserved.