It displays the security status from the aspect of users, including the security status distribution and stage distribution. See the figure below.

User Security by Severity displays the distribution of affected users.

Under User, it displays the latest attack events that users suffer. The contents include User, Severity, Event Status, Attack Stage, Attack Type, Detections, Endpoint Secure Integration, etc.

Click a user on the User list. The system will jump to the User Details page. Then, you can see user security details, attack stages, and summary. See the figure below.

You can view the security status of core business assets by selecting the Severity column.

Click Filter. You can filter users based on their Criticality, Severity, Scan Status, and Attack Stage.

Select certain events and click Block. You can block malicious addresses if they exist.

Click IP Range. It allows you to specify the network segment for detection and display the expected scope.