Skip to content

Top IPs

Overview

The Top IPs widget displays a graph that depicts the download size and uploads size of data transferred to and from devices connected to the Crystal Eye XDR network.

Note

The information related to the download size and uploads size of data transferred to and from devices connected to the Crystal Eye XDR network is also available in the Device Traffic Size Indicator section of the IP Attack Map (both in the Security Dashboard and the IP Attack Map application). You can also view this information in the Top network IPs section under the Network Threat Hunting tab of the Threat Dashboard.

How to interpret the data mentioned in the Top IPs widget of the Security Dashboard?

The Top IPs widget in the security dashboard shows top devices connected to the CE network in terms of the amount of data transferred and received by them.

crystal-eye-xdr-top-ip-widget-security-dashboard

In the above graph, the information related to the data transferred and received have been segregated and displayed in a bar graph format (the green bar shows the download size and the red bar shows the upload size).

Step 1: In the Top IPs widget of the Security Dashboard, click the link icon on the top-right side of the widget.

crystal-eye-xdr-top-ip-detailed-report

Note

You will now be directed to the Network Activity section of the Network Threat Hunting tab of the Threat Dashboard. Here you will be able to view reports related to the packets downloaded and uploaded, and size of the data downloaded and uploaded on a particular device in the CE network. You can also view the data size transferred to and received from external IP addresses.