Overview

Overview is the landing page after sign-in. It is a customizable widget grid over your whole fleet (Linux and macOS together — no scope toggle).

Default widgets

Out of the box you typically see:

Widget	What it shows
Events analyzed	Telemetry volume in the selected window
Monitored hosts	Collectors reporting in
Users tracked	Identities with recent activity
Security impact	High-level risk / impact summary
Threat profile	Distribution of finding types or severity
Recent findings	Latest anomalies and alerts to review

Use edit controls on the page to:

Additional widgets may include host status, top talkers, file mutations, open anomalies, and detection-rule activity.