[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-09-10。"],[],[],null,["# Common curated dashboards overview\n==================================\n\nSupported in: \nGoogle secops [SIEM](/chronicle/docs/secops/google-secops-siem-toc)\n\nThis document provides an overview of the common curated dashboards. These dashboards\nprovide an out-of-the-box experience that lets you visualize and monitor\nimportant security metrics.\n\nUser sign in overview dashboard\n-------------------------------\n\nThe user sign-in overview dashboard provides a comprehensive analysis of\nauthentication activities, helping you identify and monitor sign-in events.\nThis helps you detect potentially risky users, analyze sign-in statuses and trends,\nand understand geographical activity and associated hosts. You can also investigate\nunusual login behaviors, swiftly respond to potential security breaches, and\nmaintain robust security through continuous monitoring and proactive threat\ndetection. This dashboard captures events from all ingested\nlog sources, relying on available and correctly parsed UDM fields for accurate results.\n\nFirewall activity monitoring dashboard\n--------------------------------------\n\nThe firewall activity monitoring dashboard provides an overview of firewall status\nand traffic. It enables effective threat management by analysing blocked traffic\nversus allowed traffic and identifying top destination IPs. Additionally, it supports performance\nmonitoring by tracking rule effectiveness and changes. It also helps in prioritizing\nand responding to critical vulnerabilities and highlights suspicious traffic patterns.\n\nSysmon monitoring dashboard\n---------------------------\n\nThe sysmon monitoring dashboard provides an overview of process creations, network\nconnections, and file changes, helping security analysts, security infrastructure\nmanagers, security managers, and auditors interpret sysmon activities,\nidentify suspicious behavior, and track potential threats for rapid response.\nThis facilitates effective threat management, supports performance monitoring,\nand enables efficient prioritization and response to critical security events.\n\nWeb Application Firewall (WAF) monitoring dashboard\n---------------------------------------------------\n\nThe Web Application Firewall (WAF) monitoring dashboard provides real-time\ninsights into web application security. It offers a comprehensive overview of\nWAF status, facilitates effective threat management by analyzing traffic and\nattack patterns, supports performance monitoring, and enables prioritized responses\nto critical security concerns.\n\nDNS monitoring dashboard\n------------------------\n\nThe DNS monitoring dashboard provides a centralized view of DNS performance and\nactivity, offering insights into query types, top source IPs, and various event\nstatistics, including total, allowed, and denied DNS events.\n\nMulti-factor Authentication (MFA) monitoring dashboard\n------------------------------------------------------\n\nThe Multi-factor Authentication (MFA) monitoring dashboard provides a comprehensive\noverview of MFA activities, facilitates effective threat management, supports\nperformance monitoring, and enables prioritized responses to critical security concerns.\n\nNetwork traffic overview dashboard\n----------------------------------\n\nThe network traffic overview dashboard provides real-time insights into network\ndata flows, enabling them to efficiently monitor, analyze, and address network\nactivities. This dashboard assesses traffic patterns, protocol distributions,\nand event classifications to identify anomalies and irregular behaviors.\n\nPort and protocol overview dashboard\n------------------------------------\n\nThe port and protocol overview dashboard provides a thorough analysis of network\nports and protocols, offering real-time and historical data on port activity,\nprotocol utilization, and potential vulnerabilities. This dashboard helps maintain\nnetwork security, optimize performance, and ensure compliance.\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]
