Table View

The Table View displays detailed information for all app instances that meet the current filter conditions.

From here, you can drill down to a specific instance and suspend, degrade playback, or resume an instance displaying risky behavior. On this table, there is no indication of whether an instance is already suspended.

Hide and Show Columns

Hide or show columns using the columns button in the bottom right corner of the table.

App Instance Drill Down

Clicking on the row of a particular app instance will open a detailed information page for that app instance.

The top bar of the App Instance window contains at-a-glance indicators of event detections, the current risk level for that app instance, and whether the instance is suspended or degraded. The Behavior box includes information about the application and its recent usage, while the Event Info box on the right-hand side of the display includes selected event, device and location information.

Clicking on a particular event in the Events box displays detailed information for that event.

Suspending Instances

Suspending an app instance immediately terminates the instance. If a suspended instance is reopened, it is immediately terminated.

To help you decide whether to suspend the instance, select an app instance from the list to see its detailed detection information. Consult the Risk Detections Quick Guide for guidance on when to suspend instances.

The suspended instance remains visible in the instance table so you can resume it at any time, allowing it to be reopened. A resumed instance retains the risk level that it had when it was suspended.

You can suspend or resume an instance from either the Table View or the app instance window:

• From the Table view, you can select instances using the left checkboxes and immediately suspend them using the Select Action > Suspend button at the top right of the list.
  From this view, resume a suspended instance with Select Action > Resume.
• From the app instance window, you can suspend the app instance by selecting Response > Suspend at the bottom right of the app instance window.
  From this view, resume a suspended instance with Response > Resume.

Degrading Playback

NOTE Degrade Playback is available for app instances running on Android devices only.

Degrading playback introduces a visible blur to video playing on Android devices.

You can degrade playback on an instance from the Table View or the app instance window:

• From the Table view, select instances using the left checkboxes and degrade playback using the Select Action > Degrade Playback button at the top right of the list.
  From this view, restore a degraded instance with Select Action > Restore Playback.
• From the app instance window select Response > Degrade Playback at the bottom right of the app instance window.
  From this view, restore a degraded instance with Response > Restore Playback.