View Device Entity Details

Get Started with Attack Surface Insights
Configure Attack Surface Insights
- Restrict Entity Creation
  - Pre-Built Enrichment Rules Restricting Entity Creation
  - Restrict Entity Creation Using a Custom Enrichment Rule
- Custom Linking for User Entities
  - Apply Custom Linking Updates to an Existing User Entity
Search for Entities in Attack Surface Insights
- Build a Search in Attack Surface Insights
- Enter a Search in Attack Surface Insights
View Entities in Attack Surface Insights
Manage Entities in Attack Surface Insights
- Edit Entities in Attack Surface Insights
  - Manually Edit Entities in Attack Surface Insights
  - Automatically Edit Entities in Attack Surface Insights
- Delete Entities in Attack Surface Insights
  - Delete an Entity
  - Delete Multiple Entities
Entity Attributes
- User Entity Attributes
- Device Entity Attributes

View detailed information about a device entity.

To view details about a device entity, select the device entity. From the details, view:

View Device Entity Attributes

You can view all device entity attributes in device entity details.

Critical attributes are highlighted at the top of the entity details. Other attributes are organized by the source from where they're derived: attributes derived from context tables are under Context Data and attributes derived from events are under Event Data.

View Device Entity Threat History

Under Device Risk Trend, view a history of the cases and alerts associated with a device entity over a period you specify: last seven days, last two weeks, last month, last two months, or last three months:

Device Risk Trend showing the time period menu expanded and highlighted in a red rectangle.

To view the number of open cases and alerts created over the specified period, minimize Device Risk Trend:

To view details about the cases and alerts, click <#> cases or <#> alerts:

Minimized Device Risk Trend showing the open cases tooltip.

Minimized Device Risk Trend showing the open alerts tooltip.

To view a line chart of a device entity's risk score over time, expand Device Risk Trend. Each point on the line chart represents the highest Threat Center case or alert risk score associated with the device entity on a given day.

Expanded Device Risk Trend line chart depicting a device entity risk score over the last 3 months.

To view more information about the case or alert with the highest risk score, hover over the point on the line chart:

The Device Risk Trend chart showing a specific point on the chart.

To navigate to the case or alert with the highest risk score in Threat Center, click the point.

View IP Address History

Under IP Address History observed in events, all IP addresses observed in events related to the device entity. To refresh the list, click A blue arrow forming a circular shape pointing clockwise.

Attack Surface InsightsAttack Surface Insights Guide

Table of ContentsTable of Contents