The Investigate widget displays the You might also want to investigate ... message and a list of custom-tailored facts and destinations prepared by the NSX Network Detection and Response application based on the activity in your network.

To explore interesting security information, follow the links provided in the list. The widget displays any of the following information depending on what the NSX Network Detection and Response application detected.

Detail Name

Description

Hosts

Reports suspicious activity on the hosts in your network. Click the link to go to the Hosts page.

Suspicious file downloads

Reports suspicious file downloads. Click the link to go to the All tab on the Files downloaded page.

Network anomalies

Reports INFO events that might need investigation. Click the link to go to the Events page.