Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
The Web Security Dashboard > Threats dashboard > Reviewing threat-related forensic data
Reviewing threat-related forensic data
Web Security Help | Web Security Solutions | Version 7.8.x
When an administrator selects an incident on the Threats > Event Details page that includes forensic data, the Forensic Data area below the table is populated with details about the attempted file transfer. Forensic details include:
Field
Description
Source
The user or IP address making the request.
Destination
The IP address of the target machine.
Data Security Incident ID
The Websense Data Security ID number associated with the incident. Can be used to further investigate the incident in the Data Security manager (requires Web Security Gateway Anywhere or a Websense Data Security solution).
Files
The name and size of the file or files associated with the incident. The file name is a link that can be used to open the actual file.
WARNING: Use caution when opening a captured file. The file might contain malware that could infect the machine used for investigation. The file could also contain sensitive data.
Parameters and Body
Shows CGI parameters and HTML body details for the request used to send or retrieve the file.
The number of parameters and the details included in the body of the request may vary widely from incident to incident.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
The Web Security Dashboard > Threats dashboard > Reviewing threat-related forensic data
Copyright 2016 Forcepoint LLC. All rights reserved.