Occasional Contributor

Hi All


I am trying to understand the CAS Dashboard alerts and need a bit of guidance and understanding, please :flushed:

I see an alert for "Discovered app security breach" for Premera Blue Cross.(See Fig 1 attached)


I click on the app and it shows I have 2 active users, 6 transactions. but no alerts!  (See Fig 2 and 3 attached)

The 2 "active" users it claims accessed this app are actually 2 of our IT Team browsing the relevant url related to the breached app to determine what's on the website. 


I am confused why they would be listed as active users, if we have no alerts and they don't have any apps installed related to "Premera Blue Cross". Confused.com! Any pointers would be very much appreciated  :cool: 


Thanks in advance