SYNOTI / Dashboard
Dashboard
Real-time security operations overview.
Active Incidents
12
3 vs yesterday · 4 critical
Detections / 24h
2,340
12% noise reduced
Mean Time to Respond
4.2m
38% faster than last week
Automation Rate
86%
6% playbook success 97%
Threats Blocked
9,847
9% across 17 sources
Incident Timeline
Incidents by Severity
Incident Queue
| ID | Severity | Title | Assignee | Status | Age |
|---|---|---|---|---|---|
| INC-32418 | Critical | [CRITICAL] HighMemoryUsage on 10.0.12.11:9100 | J. Wilson | Contained | 2m |
| INC-32417 | High | Anomaly detected: system — phy-08 | S. Mitchell | Investigating | 14m |
| INC-32416 | High | SSH brute force from 203.0.113.45 | — | Open | 41m |
| INC-32415 | Medium | [WARNING] HighDiskIOWait on 10.0.12.13:9100 | M. Johnson | Investigating | 1h |
| INC-32414 | Critical | Service down: www-02 | A. Rodriguez | Contained | 1h 20m |
| INC-32413 | Low | Anomaly detected: unknown | J. Wilson | Resolved | 3h |
| INC-32412 | High | [HIGH] samba-libs -- DEB-samba-libs | — | Open | 3h 30m |
| INC-32411 | Medium | Database connection degraded: mysql-01 | S. Mitchell | Resolved | 5h |
| INC-32409 | High | Lateral movement — SMB waves | A. Rodriguez | Investigating | 9h |
Source Status
| Source | Status | Events / day |
|---|---|---|
| Wazuh XDR | Healthy | 2.1M |
| Wazuh EDR | Healthy | 1.4M |
| SNMP Firewall | Healthy | 980K |
| Wazuh IDS/IPS | Healthy | 640K |
| Mail Gateway (Postfix) | Healthy | 310K |
| Cloud (VMware) | Degraded | 120K |
Threat Intel Feeds
| Feed | Type | Indicators | Interval | Status |
|---|---|---|---|---|
| SYNOTI Threat Network | Proprietary | 412M | Live | Healthy |
| Wazuh Threat Intel | Commercial | 188M | 15 min | Healthy |
| Open-source intel (3) | Open source | 96M | 5 min | Healthy |
| Passive DNS feeds | Open source | 74M | 1 h | Healthy |
| National CERT feeds | Government | 31M | 6 h | Healthy |
| Vendor intel (legacy) | Vendor | 2M | 1 h | Degraded |
Resource Pressure
View allCPU — app-02
91%
Memory — mysql-01
74%
Disk /var — app-02
92%
Disk /data — ch-02
71%
Network — lb-01
58%
CPU — www-01
34%
Agent Health by Group
Throughput / 24h
Recent Activity
View allRansomware behavior blocked on mail-01 CRITICAL
Playbook PB-041 auto-contained host · Ryuk TTPs matched
Incident INC-32464 opened — high CPU on app-02 HIGH
Auto-remediation playbook PB-031 triggered
XDR correlation — 3 indicators linked to one campaign
IOC cluster tagged 'SILVER-APT' across 12 agents
Threat intel feed synced
4,812 new indicators ingested from 8 sources
SCA scan completed on 128 hosts
98.2% compliance · 11 benchmarks passed
Agent auto-upgrade rolled out to 64 endpoints
v4.8.1 v4.9.0 · 0 failures