Home and dashboards

The Insights Home page provides most views into your connected applications and services.

ℹ️

Note

Identity Security Insights supports direct linking from all available pages, including filtered and sorted results, via the page URL. Authorized users are required to sign in before accessing the linked page.

Access your Insights site

1. In a Chromium-based browser, sign into app.beyondtrust.io with your credentials.
   The BeyondTrust Pathfinder Home displays.

2. At the top right of the page, select your site from the drop-down.

3. Select the Identity Security Insightstile from your list of available applications.
   The Insights Home page displays for the selected site.

   • Alternatively, from the BeyondTrust Home page, click Menu > Insights > Insights. The Insights Home page displays for the default site. Select a different site from the drop-down on the top right of the page.

Dashboards

Dashboards are where you can monitor findings from Insights at-a-glance. To change dashboard views, select an option from the Dashboarddrop-down on the Insights Home page.

Insights Summary

The Insights Summary dashboard is a summary of the key data collected by Insights.

• Overview: A summary of your connectors, accounts, entitlements, privileges, and more.
• Connectors: The integrations from which Insights generates summaries and reports. Click to open the Connectors page.
• Total Accounts: The total number of linked identities found by your active connectors. Click to open the Accounts page to view a complete listing of accounts.
• Accounts with High True Privilege: The total number of accounts with a privilege level of Highest and High. Click to open the Accounts page, filtered by the accounts with these privilege levels.
• Escalation Paths: The total number of accounts that have an escalation path to high-level or administrative privileges, or accounts with membership in security groups or roles known to represent exploitable privileges. Click to open the Entitlements page, filtered by the entitlements with a Highest privilege level.
• Analytics & Reporting: A shortcut to your Reports page, which lists all available Insights reports.
• Identities by Privilege Level: A summary of color-coded risk assessments, listed by importance and potential privilege, for connected accounts. The privilege level of each identity is based on the privilege level of the identity's account. Click to view the Identities page, sorted by privilege level (Highest listed first).
• Detections by Severity: A summary of potentially compromised identities. Examples of detections surfaced by Insights include suspicious login failures, missing multi-factor authentication, and stale or dormant accounts. Click to open the Detections page.
• Recommendations by Importance: A summary of security health and remediation based on automatic detections. Addressing critical and high-importance recommendations greatly improves security posture. Click to open the Recommendations page.

Identity Security Risk Assessment

The Identity Security Risk Assessment (ISRA) dashboard is a comprehensive report of findings in your environment. It is divided into five tabs: Overview, Privilege, Risk & Hygiene, Exposure, and Summary.

• Overview: Use this tab for broad insights into connected data sources, discovered accounts, detected identities, and average accounts per identity. You can also visualize accounts per connector, and monitor external and non-human accounts.
• Privilege: Use this tab to identify and prioritize instances of privilege escalation, compare direct privileges with true privileges across various levels, and the privilege levels of accounts by connector.
• Risk & Hygiene: Use this tab to see a count of all Paths to Privilege and highest privilege, gain insight into passwords, MFA, and environmental factors, and break down recommendations by importance and connector.
• Exposure: Use this tab to understand credential exposure, risky behaviors, attack indicators, and compromise indicators. You can also view total detections and recommendations by severity and see recommendations and detections for accounts at risk.
• Summary: Use this tab to see key findings and understand next steps, including additional BeyondTrust solutions to secure your environment.

Security Analysis Overview

The Security Analysis Overview dashboard is designed specifically for Security Analysts and is divided into 3 sections:

• Environment Overview: Use this section to track detections and recommendations by status (New, Under Review, Resolved).
• Significant Findings: Use this section to focus on the top 10 accounts by detection volume and the highest severity detections to address the most critical threats.
• Event Details: Use this section to see detailed event information for in-depth analysis.