Basic Usage

This chapter helps you familiarize yourself with cognitix Threat Defender. The first topic provides an overview of the main interface components. The remaining topics explain in step-by-step instructions how to carry out basic tasks.

Tip

A freshly installed Threat Defender comes with several preset behavior-based correlation scenarios, static network objects, etc. for various use cases that you can enable or adapt to your requirements.

• The User Interface
  • User Interface Components
  • Handling the User Interface
• Discovering the Network
  • Analyzing Protocols and Destination Countries
  • Finding YouTube Users in the Last Hour
• Creating Static Network Objects
• Creating Dynamic Network Objects
• Creating Global Rules
• Creating Correlation Scenarios: Blocking TCP Port Scanners
  • Objective
  • Creating an Advanced Correlation Scenario
  • Creating an Event Tracking Table
  • Creating a Dynamic Network Object
  • Creating Rules in a Correlation Scenario
  • Result
• Viewing the Content of Event Tracking Tables
• Using Asset Tracking
  • Creating a Network Inventory
  • Handling Newly Discovered Assets

---

Additional References:

For information on the basic configuration of Threat Defender, installing a license and setting up user tracking, refer to Completing the Setup.