cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1513
Views
0
Helpful
1
Replies

device trajectory nitpick...but really, can't you get the times right?

 

Maybe I'm being too picky... but do any of you see this in your consoles?

Its a CloudIOC, which happend on 11/10 at 9:12... the red dot for the day/month is right, but the red dot for the time is wrong.

And its right in the bottom timeline... but if you click on the red dot in the 10am box, there's no IOC there... 

 

Ken 

 

devicetrajbug.PNG

 

 

 

1 Reply 1

ppreenja
Cisco Employee
Cisco Employee

Hello Ken,

 

The red dot for the time shows the approximate time for all the nearby compromise events.

For the exact time of your event in the time frame window, you should be able to see the two small blue triangle indicators pointing to the time of the event detection time.

 

I hope that explains.

 

Cheers,

Pratham