View and analyze Privileged Detection events

This section describes how to view and analyze Privileged Detection events in the ISI Explorer page, and also view events in the Privileged Detection dashboard on the Insights page.

Overview

You can view and analyze Privileged Detection events in the ISI Explorer page. The ISI Explorer page shows you contextual activity and risk profile information about various identities such as IT administrators, workforce, and external vendors. This information spans the timeframe of before an identity becomes privileged, during the process of becoming a privileged identity, and afterward.

When a Privileged Detection event occurs, you can receive an alert in Slack, Microsoft Teams, or by email. The alert contains a link that opens the Explorer page. You can also access the Explorer page from Privilege Cloud. For more information about setting an alert, see Configure response automation.