ocsf-200*


Finding Velocity

Finding Velocity

Count


Finding Severity

Finding Severity


Findings table

Findings table


Findings (2001)


ocsf-4001*


Aggregate Traffic for Account

Aggregate Traffic for Account

Bytes


Account Level - Top Egress Connections

Account Level - Top Egress Connections


Account Level - Top Ingress Connections

Account Level - Top Ingress Connections


Account Level Network Activity Drilldown (4001)


ocsf-3005*


API Activity By Service Over Time

API Activity By Service Over Time

API Call Volume


API Calls By Service

API Calls By Service


Service Activity by Region

Service Activity by Region


API Call Velocity By Region

API Call Velocity By Region

Count


Top 5 services with API Activity

Top 5 services with API Activity


Top 10 Resources by ARN

Top 10 Resources by ARN


Top 10 API Operations for Organization

Top 10 API Operations for Organization


API Activity (3005)


ocsf-4003*


Top Account related DNS Activities

Top Account related DNS Activities

Count

Count


Top Query Activity By Hostname

Top Query Activity By Hostname


Top Query Activity by Source IP by account


Top Query Activity by Source ENI by account

DNS Activity (4003)


Aggregate Traffic for Organization

Aggregate Traffic for Organization

Bytes


Top Traffic By Account

Top Traffic By Account

Sum of traffic.bytes


Connection Actions

Connection Actions


Top Egress Connections

Top Egress Connections


Top Ingress Connections

Top Ingress Connections


Top 5 Accounts By Connection Actions

Top 5 Accounts By Connection Actions

Network Traffic (4001)


ocsf*


ocsf-3002*


ocsf-3001*


Top 3 Active accounts

Top 3 Active accounts

Aggregate Event Counts By Top 3 Accounts


Deny / Allow Activities

Deny / Allow Activities

Count


Event breakdown across top accounts

Event breakdown across top accounts

Top  Accounts By Class UID and Category UID


Events by top 10 active accounts

Events by top 10 active accounts

OCSF Events