Overview
The Command Dashboard serves as your central hub for overseeing multiple Microsoft tenants through a single, intuitive dashboard. By default, it displays data for all onboarded tenants, with the option to customize your view by filtering specific workspaces.The Command Dashboard is designed for MSPs, MSSPs, and security teams managing tenants and environments. All data updates in real-time as incidents are detected and resolved.
Dashboard Cards
The Command Dashboard features four key data cards that provide at-a-glance insights into your security posture:Incident Tracker
Displays the number of High severity incidents and total incident count per workspace. Quickly identify which tenants need immediate attention.
Latest Gamebook Activity
Shows recent Gamebook actions including Workspace, Status, Incident ID, and Owner. Click any incident ID to jump directly to its summary.
Data Connector Anomalies
Lists detected anomalies in your data connectors by workspace. Click a connector name to access that workspace’s Data Connector library.
Incidents Table
A comprehensive view of all incidents across connected workspaces with filtering and bulk action capabilities.
Incidents Table
The Incidents table is the heart of the Command Dashboard, displaying all security incidents across your connected workspaces.Table Columns
| Column | Description |
|---|---|
| Severity | Incident severity level (High, Medium, Low, Informational) |
| Workspace | The tenant/workspace where the incident occurred |
| Incident Title | Brief description of the incident |
| Incident ID | Unique identifier (click to view details) |
| Creation Time | When the incident was first detected |
| Status | Current state (New, Active, Closed) |
| Owner | Analyst assigned to the incident |
Filtering Options
You can filter the incidents table by:- Workspace — Select specific workspaces to focus on
- Severity — Filter by High, Medium, Low, or Informational
- Status — Show only New, Active, or Closed incidents
Bulk Actions
Select multiple incidents to perform bulk operations:1
Select Incidents
Use the checkboxes to select one or more incidents
2
Choose Action
Select an action from the bulk actions menu (e.g., assign owner, change status)
3
Apply Changes
Confirm to apply the changes to all selected incidents
Workspace Filtering
The workspace filter at the top of the Command Dashboard allows you to customize your view:- Click the Workspace Filter dropdown
- Select one or more workspaces to display
- Your selection persists as you navigate to other pages in ContraForce
Accessing Incident Details
To view detailed information about any incident:- Locate the incident in the Incidents table
- Click the Incident ID (hyperlinked)
- The Incident Details page opens with full investigation capabilities
- View the complete incident timeline
- See all affected entities
- Run Gamebook response actions
- Add comments and update status
Next Steps
Incident Management Guide
Learn the complete workflow for triaging and resolving incidents
Data Connector Anomalies
Understand how ContraForce detects connector issues
Gamebooks
Automate incident response with one-click actions
Multi-Tenant Features
Explore all multi-tenant management capabilities
Need help? Contact the ContraForce Support team at [email protected].