Events/min 847
--:-- UTC
Events / Min
847
Derived from the recorded 24-hour window
Active Alerts
0
Current merged alert queue
Open Investigations
0
Canonical and analyst-created cases
Generated Samples (7d)
0
Rolling centralized fact stream
0
Log Events Indexed
0
Detection Rules
0
Total Investigations
0
Investigations Closed
0
Reports Generated
0
Sources Online
Log Ingest Volume - Last 24 Hours Click a bar to filter investigations by ingest window
Normal
Elevated volume
Recent Alerts View all →
Ingest Sources 7-day modeled event volume
SourceEventsShare
 Foyl Identity142,84732%
 SecIntel Mail Exchange↑ spike98,23322%
 FoylGuard Endpoint87,44120%
 Foyl NGFW76,22917%
 Protective DNS65,88215%
 SecIntel VPN Gateway43,11710%
 Foyl Cloud Activity31,0047%
 SecIntel SCADA Monitorreduced28,7736%
MITRE ATT&CK Coverage 28 active rules →
Initial Access
3
Execution
2
Persistence
3
Priv. Escalation
2
Credential Access
2
Discovery
2
Lateral Movement
1
Collection
2
Exfiltration
3
Impact
2
ICS / OT
4
Open Investigations View all →