The Main Dashboard provides an overview of all your data and activity, notable events and their severity, playbooks, connections with other security tools, team workloads and a summary of ROI from automated actions.
Data is sourced from SIEMs (like Splunk ES) or tools like email applications via Phantom’s API.
This screen can also be sorted and filtered by time period, data source, or user. Widgets can be toggled on or off, or rearranged per your specifications.
The ROI summary shows key measures of the value of Phantom, such as time and dollars saved.