4. Basic Concepts

In this chapter we will go over the basic concepts of your Analysis Cockpit. We explain how Events and Cases are handled, and how to establish a streamlined workflow within your Analysis Cockpit.

Contents

• 4.1. Events
• 4.2. Baselining
  • 4.2.1. Baselining Views
  • 4.2.2. Compromise Assessment Mode
  • 4.2.3. Deep Inspection Mode
  • 4.2.4. Custom Signatures Only Mode
• 4.3. Cases and Log Processing
  • 4.3.1. Case Templates
• 4.4. Understanding Users, Roles, Rights and Case Status