Viewing, tuning, and editing a Behavior profile

Viewing a behavior profile offers you information beyond a traditional chart. You can create what if situations and tune the model, interact with the data(slice and dice) using the histogram/interactive filter on the right or simply ask your question about the behaviors to Resolution Intelligence’s conversation AI.

The page consists of three tabs categorized based on the outcomes you can achieve:

1. Behavior analysis

2. Model details

3. Run history

The landing page on selecting a behavior profile.

Behavior Analysis

The default landing page on selecting a behavior profile is the behavior analysis tab. In the behavior analysis tab you can

1. Learn more about the behaviors the models is tracking

2. Investigate the behavior data using the interactive filtering on the right

3. Create what what if analysis on the model and tune the model for better performance

4. Ask questions to the behavior model using Resolution Intelligence’s conversational AI

The first histogram – highlighted in yellow in the image below – visualizes the total behaviors tracked for each day for the last 30 days. By default, the last day is selected in the histogram.

The second histogram visualizes the distribution of anomaly scores for the selected day. This graph also includes an interactive slider, using which you can do a what if analysis on the behavior model.

What if? By moving the slider across the distribution, you can visualize when certain behaviors shift from being non-anomalous to anomalous. This feature allows for a more granular and dynamic understanding of how the system tracks and scores behaviors, using which you can tune the model for better performance and false positives.

Figure highlighting the histogram with the distribution of anomaly score

The table below the second histogram lists complete records data for the selected day. The table is interactive and allows you to sort by any dimension.

The Interactive filtering on the right can help you control/filter what data you want to see in the table. But the interactive filtering also serves another purpose. It also highlights patterns in the selected data, sorted in descending order.

Thus far, data analysis has primarily involved the histograms, tables, and interactive filters. However, with Resolution Intelligence, you can achieve the same outcomes simply by asking questions through conversational AI.

With conversational AI, you can benefit from unparalleled convenience and functionality. You can ask any question about the behavior model in plain language and the system will identify and execute the necessary steps to find the answer.

Model details

This page provides a comprehensive list of details about the model, including the selected attributes, aggregation type, model type, alerting conditions, associated tactics, and all metadata associated with the model.

Run history

The run history allows you to see the status/outcomes of the behavior jobs that were run every day. Here, you can download the outcome of a job as a CSV file.