Overview
The Overview module is the first screen you see when you log in to the SenseOn platform. It gives your security team an at-a-glance summary of the current threat landscape across your environment and acts as the starting point for daily triage.
What the Overview Shows
The Overview surfaces the most important information from the last 28 days (configurable) without requiring you to run queries or navigate to individual modules:
- Active cases: count of open cases grouped by severity (Critical, High, Medium, Low)
- New observations: volume of security observations received from endpoints and network sensors
- Device health: proportion of enrolled devices that are online and reporting
- Top detections: the detection types appearing most frequently across your estate
- Case backlog: cases awaiting triage or analyst assignment
Alert Triage Workflow
The Overview is designed to support a structured triage process at the start of each shift or working day:
- Review critical and high-severity cases: these are surfaced at the top and require the most immediate attention.
- Dismiss noise: low-confidence observations can be acknowledged in bulk from the Overview without opening each case individually.
- Assign cases: cases can be assigned to individual analysts or teams directly from the Overview panel.
- Navigate to Investigate: click any case to open the full investigation workspace, where you can view evidence, timelines, and response options.
Metric Cards
Each metric card on the Overview page links to a filtered view of the relevant module. For example:
| Card | Destination |
|---|---|
| Critical cases | Investigate, filtered to Critical |
| New observations | Experience, showing today's observations |
| Offline devices | Assets > Devices, filtered to offline |
| Top detection | Hunt Lab pre-populated with a query for that detection |
Customising the Time Range
The first time you open the Overview it shows the last 28 days. Use the time picker in the top-right corner to adjust the window. Changes apply to all cards on the page.
Your choice is remembered against your own account in that browser, so it survives a reload, a sign-out, and a SenseOn platform upgrade. A relative period such as Last 7 days is recalculated against the current time each time you return, while a Custom range is kept exactly as you set it.
The picker offers these presets:
- Last 24 hours
- Last 7 days
- Last 28 days
- Previous month: the whole of the previous calendar month
- This month: from the 1st of the current month up to now
- Previous quarter: the whole of the previous calendar quarter
- This quarter: from the start of the current quarter up to now
- Custom: pick any start and end date and time
When you choose a calendar preset, the badge on each card names the period it covers, for example Previous month (September 2026) or Previous quarter (Q3 2026). The This month and This quarter periods run up to the current time and are recalculated when you reload the page.
A Custom range can span up to a full calendar quarter (around 92 days), so you can select a complete month or quarter even where it crosses the autumn clock change.
Note: Quarters are calendar quarters (January to March, April to June, July to September, October to December). Fiscal-year quarters are not supported.
Next Steps
- To investigate a specific case, go to the Investigate module.
- To browse raw observations and events, go to the Experience module.
- To see a detailed breakdown of metrics over time, go to Dashboards.