SENTRADOCSSign in

Everyday workflows

A daily check, a weekly review, handling a blocked customer, and spotting an attack.

Daily check (5 minutes)#

  1. Overview — is every site in Protected sites answering? Anything unusual in Top threats today?
  2. Monitor › Incidents — any new High or Critical incident? Read its summary.
  3. Live — glance at the swarm radar.
  4. Note anything odd and tell your administrator.
A read-only Overview
A read-only Overview

Weekly review (20 minutes)#

  1. Build a Security operations report for the last 7 days; save it as PDF.
  2. Look at Shadow review for addresses you recognise as legitimate.
  3. Compare Stopped and the top attack kinds with last week.
  4. Share the PDF with your team.

A customer was blocked#

  1. Get the reference number, time and what they were doing.
  2. Find the event (Monitor › Events, filter Block) and open it.
  3. Send the event number and reason to your administrator, asking for a narrow fix.

Something looks like an attack#

Signs: Stopped jumps, a swarm appears on the radar, a site stops answering, a Critical incident opens.

  1. Note the time, the incident or campaign number and what you see.
  2. Contact your administrator straight away.
  3. Keep watching Live; do not try to contact the attacker's addresses.

Monthly#

Build an Executive report for last month and attach the value report for management.