Top 20 high risk users

The Top 20 High Risk Users chart shows the top 20 high-risk users and their respective number of high-risk events.

To access the Top 20 High Risk Users chart, go to Monitoring → Threat Protection.

The drill-down table shows more detailed information about each risk evaluation event for the user, such as IP address and target application.

Scroll to the right to see additional columns. For use of the filtered search bar, see Filtered searching.

You can click a column header to sort the results by that value. Results are sorted by the Time column by default, with the most recent entries listed first.