Help Center
Quick Start
- Overview
- System requirements
- Minimum privileges required
- Default port configuration
- Installing DataSecurity Plus
- Uninstalling DataSecurity Plus
- Starting DataSecurity Plus
- Launching DataSecurity Plus
- Configuring your solution
- Licensing details
- Applying a license
File Auditing
- About File Auditing
- Domain configuration
- File server configuration
- Failover cluster configuration
- NetApp server configuration
- Nutanix server configuration
- EMC Isilon server configuration
- Workgroup configuration
- Amazon FSx configuration
Setting up File Audit
Dashboard
Reports
Alerts
Configuration
Storage Configuration
File Analysis
- About File Analysis
- Domain configuration
- File server configuration
- Workgroup configuration
- SMB File Server Configuration
- On-Demand Reports
Setting up File Analysis
Dashboard
Reports
Alerts
Configuration
Data Risk Assessment
- About Data risk assessment
Setting up Data risk assessment
Dashboard
Reports
Ownership analysis
Configuration
Endpoint DLP
- About Endpoint DLP
Setting up Endpoint DLP
Reports
Alerts
Prevention policies
Configuration
Cloud Protection
- About Cloud Protection
- Gateway Server Installation Steps
- Gateway Configuration in Endpoint
- Gateway Cluster Configuration
- Gateway Server Management
- Certificate Authority Configuration
- Two-way SSL configuration
- Manage Certificate Trust Store
- Threat Analytics Database
- Manage Banned Applications
- Manage Authorized Applications
- Regenerating gateway server access key
- Updating gateway server
- Gateway Server Failover
- Load Balancer Configuration
- Global Insight
- Application Insight
- User Insight
- Shadow Application Insight
- Banned Application Insight
- Cloud App Discovery
- Activity Overview
- File Transfer Insights
- Control Policies
- Application Insights
- Actor Insights
- Shadow App Discovery
- GenAI Insights
- Cyber Threat Analytics
- CIPA Compliance
Setting up Cloud Protection
Dashboard
Reports
Control Policies
Storage Configuration
Administrative settings
- Technician configuration
- Notification filters
- Manage agent
- Agent settings
- SIEM integration
- Business hours configuration
- Two-factor authentication
- Workgroup configuration
- Security policy
Email configuration
General settings
- Connection
- Personalize
- DataSecurity Plus Server
- Privacy Settings
- Disk utilization
- Schedule Retention Policy
Release notes
2026
2025
2024
2023
2022
2021
2020
2019
2018
2017
2016
2015
Troubleshooting
- HTTP communication failure
- Dormant DataEngine
- Secure Gateway server failure
- RPC communication failure
- Cloud Protection Gateway server failure
- Known issues and limitations
- Known errors and solutions
- Report discrepancy in File Analysis
Guides
- Agent document
- How to Migrate/Move DataSecurity Plus
- How to apply SSL certificate
- How to automate DataSecurity Plus database backup
- How to set alerts in DataSecurity Plus
- How to secure your DataSecurity Plus installation
Cyber Threat Analytics reports
The Cyber Threat Analytics reports provides visibility into cloud access activity that matches known threat indicators. These reports help you detect when users are accessing applications or domains associated with malware, phishing, anonymization services, or other security threats. By leveraging threat intelligence, these reports help identify high-risk access events that may require immediate investigation or policy intervention.
To navigate to these reports, follow these steps:
- Select Cloud Protection from the application drop-down.
- Go to Reports > Cyber Threat Analytics.
- Choose a reports and select the desired time range from the Period drop-down.
Available Reports
| Report name | Description | Purpose |
| Access to Threat-Classified Apps | Lists requests to cloud applications classified as Threat.
Threat is an internal app classification that includes categories like hacking tools, phishing sites, and spyware. |
Use this report to identify and investigate access to threat-classified apps that may introduce risk vectors like malware intrusion, ransomware attacks, or data exfiltration. |
| Access to Low-Reputed Apps | Lists access to cloud applications with low reputation scores. | Use this report to identify actively used cloud services with poor global trust ratings and assess whether they require restrictions. |
| Access to Proxy/Anonymization Domains | Lists requests to domains associated with proxy and anonymization services. | Use this report to identify actors attempting to mask their internet activity or bypass network monitoring and access controls. |
| Access to Risky Domains | Lists requests to high-risk cloud applications.
High-risk is an internal app classification that includes categories such as key loggers, malware or bot networks, and phishing sites. |
Use this report to identify the use of high-risk applications and to assess if they require restrictions. |
