Introduction

For Partners: the Insights section is only visible when the Organization Selector is set to a specific client view.

The MDR Portal's Insights section helps you understand your organization's security posture by highlighting trends, risks, and activity detected across your environment. It transforms security data into actionable information, making it easier to identify potential issues, monitor changes over time, and prioritize security improvements.

Whether you're reviewing executive-level security trends or investigating specific areas of concern, these Insights provide a centralized view of the information you need to make informed decisions.

What Pages are included in the Insights sections

The information available in Insights may vary depending on your organization's environment, collected telemetry, and the MDR services enabled for your subscription.

This section includes the following: 

• My Network: summarizes network traffic and security events, as well as provides a section to download past weekly and monthly reports.
• Cloud Monitoring: monitors login activity (time and location) for cloud accounts, lists most targeted accounts, and provides a section to download past weekly and monthly reports.
• DNS Firewall: summarizes all requests and blocks by the DNS Firewall (based on content and security), sorts top block blocked requests, and lists blocked domains (by security or content).
• Risk Score: a dashboard with monthly reports that report on three risk factors: Software, Operating System, and Configuration risk.
• SEAS: tracks email submissions sent to the Suspicious Email Analysis Service (SEAS).
• Reports: lists all monthly and weekly reports in a page with a design similar to the AROs page.

Best practices

To get the most value from Insights:

• Review insights regularly to identify changes in your environment.
• Compare trends over time rather than focusing on a single data point.
• Investigate significant increases in risk or suspicious activity.
• Use insights to guide remediation and security improvement efforts.
• Share relevant information with stakeholders responsible for security decision-making.