How do I find incidents associated with a specific cloud app?

Investigate Cloud App Use | TRITON RiskVision | 01-June-2016

To find out if users are accessing a specific cloud app, or to look for correlations between a cloud app and security incidents:

Go to the Incidents page in RiskVision Local Manager.

Mark the Show hidden incidents check box near the top of the page (next to Time period selector).

Click Refresh.

Select Cloud App from the View drop-down list to make sure all available data related to cloud app analysis is displayed in the table.

In the Filter box above the table, enter the name of the cloud app.

Depending on the cloud app name, you may see some non-applicable results. If this occurs, try grouping the results by the Cloud App column.

To do this, click on the Cloud App column header in the table and drag the mouse upward slightly (toward the "Drag and drop column headers" box). When you release the mouse, data in the table is grouped and resorted.