Dashboard
Investigations
Context Memory
Ask a question
A
Dropzone Demo Dashboard
Viewing
Last 30 days
Conclusion
All
Source
All
Lifetime Investigations
16
Mean Time to Conclusion
4.6
min
Time Saved
7
hrs
Investigations
Conclusion
Source
Malicious
1
Suspicious
2
Inconclusive
0
Benign
13
Ignored
0
16
Total
21
21
23
23
25
25
27
27
29
29
31
31
2
2
4
4
6
6
8
8
10
10
12
12
14
14
16
16
18
18
0
0
2
2
4
4
6
6
8
8
10
10
Aug
Sep
Top Assets
View All
Asset
Alerts
54.167.54.205
11
demOS-dzone-project-1qxo5q2k-stack-p-RoleEcsTaskApp-AKJ4i2ujw2Kp
9
dzone-1qxo5q2k-app1p-us-east-1
7
10.4.1.205
5
i-0af808a3bf37a14a5
5
100.26.104.243
3
i-03aa35e2468a11bb8
1
165.232.83.8
1
dzone-1qxo5q2k-pc0mrm6r
1
Response Metrics
View Details
Time by
Mean
Time to Conclusion
4.6 min
Time to
Detect
0 ms
Time to
Acknowledge
1.1 min
Time to
Investigation
3.5 min
Data Source Integrations
connected
24
disabled
0
error
0
Alert Source Integrations
connected
1
disabled
0
error
0
Unreviewed Investigations
View All
All
15
Malicious
1
Suspicious
2
Malicious
Object:S3/MaliciousFile
INV-2
Malware Detected in S3 Bucket svchost.exe File
Sep 12, 2024
12:50PM (EDT)
7 days ago
Suspicious
Discovery:S3/MaliciousIPCaller.Custom
INV-12
Unauthorized S3 Access from Threat-Listed IP Detected
Sep 14, 2024
11:15AM (EDT)
5 days ago
Suspicious
UnauthorizedAccess:S3/MaliciousIPCaller.Custom
INV-3
Unauthorized API Access from Threat-Listed IP to S3 Bucket
Sep 12, 2024
12:55PM (EDT)
7 days ago
Benign
Recon:IAMUser/MaliciousIPCaller.Custom
INV-16
Reconnaissance Attempt Detected via ListBuckets API Call
Sep 17, 2024
8:56AM (EDT)
2 days ago
Benign
UnauthorizedAccess:S3/MaliciousIPCaller.Custom
INV-14
Unauthorized API Access from Threat-Listed IP to S3 Bucket
Sep 17, 2024
8:52AM (EDT)
2 days ago
Benign
Discovery:S3/MaliciousIPCaller.Custom
INV-15
Unauthorized S3 Access from Blacklisted IP Detected
Sep 17, 2024
8:52AM (EDT)
2 days ago
Benign
Recon:IAMUser/MaliciousIPCaller.Custom
INV-13
Unauthorized ListBuckets API Call from Flagged IP Address
Sep 14, 2024
11:20AM (EDT)
5 days ago
Benign
UnauthorizedAccess:S3/MaliciousIPCaller.Custom
INV-11
Unauthorized S3 Access from Blacklisted IP Address
Sep 14, 2024
11:15AM (EDT)
5 days ago
Benign
Execution:ECS/MaliciousFile
INV-10
High Severity Malware Detected in ECS Cluster
Sep 12, 2024
1:17PM (EDT)
7 days ago
Benign
CryptoCurrency:EC2/BitcoinTool.B!DNS
INV-9
EC2 Instance Queried Bitcoin-Related Domain Name
Sep 12, 2024
1:11PM (EDT)
7 days ago
Benign
UnauthorizedAccess:EC2/MetadataDNSRebind
INV-7
EC2 Instance Suspected DNS Rebinding Attack Detected
Sep 12, 2024
1:05PM (EDT)
7 days ago
Benign
Recon:IAMUser/MaliciousIPCaller.Custom
INV-8
Reconnaissance Attempt Detected via ListBuckets API Call
Sep 12, 2024
1:04PM (EDT)
7 days ago
Benign
UnauthorizedAccess:EC2/MaliciousIPCaller.Custom
INV-6
EC2 Instance Communicates with Malicious IP on Custom List
Sep 12, 2024
12:56PM (EDT)
7 days ago
Benign
Discovery:S3/MaliciousIPCaller.Custom
INV-4
Unauthorized S3 Access from Blacklisted IP Detected
Sep 12, 2024
12:55PM (EDT)
7 days ago
Benign
UnauthorizedAccess:EC2/MaliciousIPCaller.Custom
INV-1
EC2 Instance Communicates with Malicious IP
Sep 12, 2024
12:44PM (EDT)
7 days ago