1. Introduction

The Lepide Web Console provides an accessible and user-friendly interface for the Lepide Data Security Platform, offering a modern, logical, and intuitive layout making it easier to interrogate data with custom filters, and columns.

2. The Home Screen

The Home Screen for the Lepide Web Console will be displayed showing the five different Lepide categories, together with My Lepide and Dashboards. Clicking any of these buttons will take you into the relevant option.

The Home Screen Options are:

Lepide Auditor: Track user interactions to sensitive data and key infrastructure

Lepide Trust: Identify permission changes and users with privileged access

Lepide Protect: Identify and adjust overly permissive file or folder access

Lepide Detect: Detect and respond to threats with anomaly detection and alerts

Lepide Identify: Discover and classify sensitive data based on risk and value

My Lepide: Monitor user interactions with sensitive data and critical infrastructure

Dashboards: Overview of data security capabilities for key infrastructure

3. Role Management

3.1 Adding a New User or Group

From the Home Screen, click the Settings icon

at the top right of the screen.

The Admin Console is displayed:

• Click the Add Members button

The following dialog box is displayed:

3.2 Adding a Group

• Click the Browse Group(s) button

• The Group(s) Name area will be populated with all the Groups available

• If there are multiple pages of group names, use the First/Previous/Next/Last navigation buttons to move through the pages

• To search for a particular group, click on the Search bar at the top of the dialog box and type the search text

• To add all listed groups, click the

  

  button

• To add a specific group, click to select the group and click the

  

  button to add it to the selected users list.

• Repeat this last step for any other groups you want to add

• Select the required role of either Admin or Data Viewer:

• Click the Add button

  

  to add the group(s)

3.3 Adding a User

• Click the Browse User(s) button

• The User(s) Name area will be populated with all the usernames available

• If there are multiple pages of usernames, use the First/Previous/Next/Last navigation buttons to move through the pages

• To add all users, click the

  

  button

• To add a specific user, click to select the username and click the

  

  button to add it to the selected users list.

• Repeat this last step for any other users you want to add

• Select the required role either Admin or Data Viewer:

• Click the Add button

  

4. Dashboards

Lepide Dashboards provide an overview of data security capabilities.

To view a Dashboard, from the Home screen, click Dashboards and a screen listing all categories for Dashboards will be displayed:

Select a Dashboard Name, in this example we will look at Identify

The Identify Dashboard is displayed:

• Click the refresh button

  

  to refresh the data.

4.1 Dashboard Options

Click the Calendar icon

to change the change the time period and the following options will be displayed:

These options are 1 day ago, 7 days ago, 31 days ago and Refresh

4.2 Display the Report Behind the Data

Clicking on an area of data within the dashboard will display the report on which the data was based

• In the example below, clicking on the first column in the chart will display the All Environment Changes Report which is the report that this Dashboard chart was based on:

• Click Generate to generate the report:

5. Creating a Customized Dashboard

Dashboards can be customized so that you can choose exactly which graphs you want to see, giving you an immediate visual representation of your data.

You can create customized dashboards for Lepide Auditor, Lepide Trust and Lepide Identify. In this example, we will create a dashboard for Lepide Auditor:

• From the Home Screen, click on Lepide Auditor

The Lepide Auditor Dashboards will be displayed:

• Click on the Manage Dashboard button (top right of the screen)

• A list of all dashboards will be displayed:

• Click on the Create Dashboard button (top right of the screen)

• The Create Dashboard dialog box will be displayed:

• Add a Name and Description for the dashboard

• Click Create

The Dashboard screen is displayed with the Dashboard name at the top:

• Click Add Graph

• A list of all reports from Lepide Auditor is displayed and this list includes both pre-defined and customized reports.

• Scroll down or click the First/Last/Previous/Next buttons to move through the list of reports. If you know the name or part of the name of the report, type the name into Search Reports and a filtered list of reports will be displayed:

• In the example above, ‘Files’ has been entered into the search box so a list of reports containing ‘Files’ is listed.

• Choose the report want to include in your dashboard and click Next

The Choose Your Graph Style dialog box is displayed:

From this dialog box select from the following options:

• Choose the type of graph you require from Bar, Stacked Column, Line and Donut

• Chart Title: add a title which will appear at the top of the chart

• Label: select a label which will be a field name from the selected report

• Select Top: This is the number of records to be displayed

• Column: This is not applicable for this example as it applies to Lepide Identify only

• Click Submit

The graph will be displayed as a box on the grid with no data displayed yet

• Click Save Dashboard

• Once saved, you can click the Refresh icon

  

  to refresh the data and the chart will be displayed:

• Repeat the above steps to add further charts to your dashboard

5.1 Editing a Customized Dashboard

To edit a Dashboard:

• From the Dashboards screen, select the dashboard that you want to edit and click the Edit button

• To edit a chart within the Dashboard, click the Edit Chart icon

  

• This will display the Edit Graph dialog box. Change the options as required and click Save

5.2 Sharing a Dashboard

Customized dashboards can be shared and the steps to do this are as follows:

• From the Dashboards window, click the

  

  icon in the Actions column next to the dashboard you want to share

The following menu will be displayed:

• Click the Share icon:

  

The Select Users or Groups dialog box is displayed:

Select Groups or Users and click the Browse button to see a list of Groups or Users

• Select the names of the Users or Groups you want to share the Dashboard with

• Click Done when finished

5.3 Dashboard Examples

Here are some examples of the Dashboards available within the Lepide Web Console:

6. Creating a Custom Folder

Custom folders can be created in the Lepide Web Console providing an easy way to locate and run your frequently used reports.

To create a custom folder:

• From the Reports screen, select Create Folder

The Create Folder dialog box is displayed:

• Type a folder name and click Submit

A message box appears showing the folder has been created successfully:

• Click Done

The custom folder will be displayed in the folder list on the left-hand side of the Reports Screen:

• Now when you create a customized report, you can save it in your custom folder

7. Alerts

Real-time alerts for all significant security changes are an essential tool to enable organizations to quickly detect and respond to potential threats. All alerts are in real time and are delivered to administrators or selected recipients either to the Lepide Dashboard, via email or directly to any iOS or Android mobile device.

The Lepide Web Console can be configured to execute a customized script whenever an alert is triggered. Scripts can be of the following types: VB Script, PowerShell Script or Batch File.

Using custom script execution, you can shut down users, servers and take other actions to mitigate the effects of a security breach.

Alerts can be set up by either using one of the pre-defined Threat Models or by setting up an Alert on a report. In this guide, we will look at both methods.

7.1 Alert Status

• To see a list of Alert Reports, hover over the Detect menu to the left of the screen and select Alert Status:

This will display the Alert Status screen. Here any Alert Reports which have run will be displayed

7.2 Alert Configuration

All Alerts are set up from the Alert Configuration screen which is accessed as follows:

• From the menu to the left, choose Detect

The Alert Configuration screen will be displayed:

7.3 Threat Models

• There are many threat models included with the Lepide Web Console. A threat model is a predefined alert for a particular scenario and examples of scenarios could be a potential ransomware attack, or files copied. Enabling one of these predefined threat models allows you to generate real time alerts whenever a potential threat is detected.

All the threat models available within the Lepide Web Console are displayed on the Alert Configuration screen, under the Threat Models tab:

The Threat Models can be enabled as needed. They can then be configured to generate an alert and respond to a threat. The example below explains how to enable the Potential Ransomware Attack Threat Model.

7.3.1 How to Enable and Configure a Threat Model

• From the Alert Configuration screen scroll down until you can see the Threat Model you want to enable. You can also type into the search bar at the top to search for a specific Threat Model.

• To enable the Potential Ransomware Attack Threat Model, click the Edit icon

  

The Edit Alert dialog box will be displayed:

• Slide the Status toggle button to the right to enable the Threat Model

• Click Next

This will take you to the Filter option:

• On the left of the dialog box, you can see the Threat Model you are working on which is Potential Ransomware Attack.

• Click the Server drop down to select options to change the settings for Server, User, Object Name, Object Path, Operation, Process and From. The default setting for all these options is All.

• The threshold alert options can be customized as follows:

• Click Next

The Alert Settings are shown:

This allows you to set up responses to occur when an alert has been triggered and displays any existing responses which have been set up. You can also change the Alert Type.

• To create a new response to an alert, click the Add Action button

• The Alert Action dialog box is displayed:

• Click the Select Alert Action drop down arrow to see a list of actions available:

The Alert Actions are as follows:

• Send Email Alert

• Show in LiveFeed

• Send Alert to App

• Execute Script

The configuration of each of these actions is explained below:

1. Send Email Alert

This option allows you to send an email once an alert has been triggered. The elements of the dialog box are as follows:

• Sender Email Account: The Sender’s email account will be displayed here if it has been selected.

• Click Add New Email Account to enter a new Sender Email Account.
  For further information on adding a new email account, please refer to Section 7.4 of this guide.

• Recipient’s Email: Add recipient emails by typing the email addresses into the box. If there are multiple email addresses. separate them with a ‘,’

• Send Actions for past xx days: This option allows you to see everything that this user has done over the last number of specified days. For example, if an alert is triggered because they have been copying files, then you may want to see what else they have been doing. Check this box and specify the number of days and an email will be sent with an attachment listing everything that the user has done over the specified number of days.

• Report Format: The attachment will contain a report and the format(s) can be specified by checking the relevant box. The formats are CSV, MHT and PDF.

• Email Content: Type the content of the email to be sent here

• Send Email to user: Check this box to send an email to the user. The content of the email can be typed into the text box. To include the username within the content, use the variable %USERNAME%.

• Click Done to save the alert action.

2. Show in LiveFeed

Show in LiveFeed means that the alert will be sent to the LiveFeed dashboard which can be seen on the Lepide Detect Dashboards screen.

• Click Done to switch the LiveFeed alert on.

• The Send Alert to App option sends the alert to a mobile device.

• Click Add App Account to add a new mobile account. For further information on adding a new App Account, please refer to Section 7.4 of this guide.

4. Execute Script

The last action from the drop-down menu is Execute Script

This sets up the option to execute one of the predefined PowerShell scripts when an alert is triggered.

The elements of the dialog box are as follows:

• File Path: Browse to choose the file path of the PowerShell script by clicking

  

Choose either: Run with SYSTEM account or

Run with selected account.

• If you choose Run with selected account, you can use the drop-down to select the account or click Add Account to specify the account to be used.

• Choose Notify me when a script is executed to send an email on script execution.

• When this option is checked, the Configure button becomes available. Choose Configure to set up the sender’s account and recipient’s email address.

• Choose Parameterized input file contains to specify a variable to include in the script. When this option is checked, a drop-down menu becomes available to choose a variable:

• Click Done to return to the Alert Settings

• Now choose the Alert Type which can be Critical, Warning or Normal

• Click Next to continue

• The Confirmation dialog box is displayed with the alert details

• Click Done to finish

7.4 Setting Alerts

To set up alerts without using a threat model, follow the steps below:

• From the Alert Configuration screen, select + Add Alert

• The Add Alert dialog box is displayed:

• Add the Alert Name and optional Description

• Select the report(s) on which you want to create an alert

• Click Next

The Add Filters option is displayed:

• Click the Add Filter button to add a new filter

The Add Filters options are displayed:

• Select the filter options

• Click the Add Filter button again to add more filters if required

• The threshold alert options can be customized as follows:

• Click Next

The Delivery Settings options are displayed:

• Click Add Action to add a delivery action

The Configure Report Delivery Action dialog box is displayed:

• Select the Alert Action

This can be one of the following options:

• Send Email Alert

• Show in LiveFeed

• Send Alert to App

• Execute Script

In this example, Send Email Alert has been selected:

• Specify the Sender Email Account

• Click Add New Email Account to add a different email account if required

• Select Send Action for past xx days if required

• Select the Report Format. This can be CSV or PDF

• Specify the Recipient’s Email. For multiple email addresses, separate them with a ‘,’

• Specify the Email Content to be included in the email when an alert is triggered

• Click Done when finished

The alert is displayed in the Add Alert dialog box:

• Select Process alert remotely if required.

• To do this you will need to specify an Agent from the Select Agent Server drop down list.

• If you need to add an Agent, select the Add Agent button and follow the steps in Section 7.5 of this guide.

• Specify the Alert Type. This can be Critical, Warning or Normal.

• Click Done when finished.

• The Alert will be displayed at the end of the list and will show as Enabled.

• Click on the Alert Name to display Alert Details at the bottom of the screen.

• To delete the alert, click the Delete icon

  

• To modify the alert, click the Edit icon

  

7.5 Adding an Agent

Before adding an Agent, the agent will need to have been installed. For information about this, please see the following: https://www.lepide.com/knowledgebase/?page_id=4056743940&slug=e-discovery-user-guide

• Add the following information:

  • IP Address: Add the IP Address

  • Agent Path: Use \\Server name\Share name format

  • User Name: Use domain name\User name format

  • Password: Enter Active Directory password

• Click Done when finished

7.6 Email Settings Tab

Click the Email Settings tab to see the Email Settings Options. Here you can set up the Email or App information where the alert will be sent

• To add a new Email or App Account, click Add

• Select Add Email Account to add email account details

• Type the email account information and click Submit

• The email account details will be listed in the Alert Configuration screen:

• Select Add App Account to add app account details

• Enter the User ID and Password

• Enter the Mobile App ID which is generated by using the mobile device to scan the QR code displayed at the bottom of the dialog box.

• Click OK

8. Admin Console Options

• From the Home screen, click the

  

  icon to open the Admin Console window

The different options available within the Admin Console are described below:

8.1 Role Management

Please see this section: https://lepide.atlassian.net/wiki/spaces/LEPKB/pages/edit-v2/4052451338#3.1-Adding-a-New-User-or-Group for details about Role Management

8.2 How to View Logs

Activity logs can be viewed from within the Admin Console.

From the Admin Console, select Logs

From here you can:

• Add Search criteria and click Generate Logs to view logs based on the search text

• Select Date and click Generate Logs to view activity for that date/time period

• Export the activity logs to CSV or PDF by clicking the Export button

8.3 How to Change the Date and Time Format

The Date and Time format can be changed from within the Admin Console

• From the Admin Console, choose General Settings

• Click Date Settings and choose the date setting required

• Click Update

• Click Refresh to Update Components

8.4 Backup & Restore

Backup and Restore options can be set within the Admin Console.

These options allow you to export and import the database which contains all the configuration options you have chosen in the Web Console including custom reports and folders. Examples of where you may want to use the backup and restore features include:

• the best practice approach of taking regular backups

• in the event of wanting to migrate the Web Console to a different server

The steps to set up Backup & Restore are as follows:

• From the Admin Console Screen, choose Backup & Restore:

To Import the Database:

• Choose Import Database

• Click the Import Database button

• A list of files in the Download folder appears:

• Select the database file to be imported

• Click Open

• A message box appears:

• Click Import and the following is displayed:

• The import may take some time

To Export the Database:

• From the Admin Console Screen, select Export Database:

• Click the Export Database button

• The screen will show Loading at the top

• The export may take some time.

• When it is finished you will see the exported file in the Exported Files section of the Admin Console

• When it is finished you will see an SQL file in your Downloads folder. This will start with ‘lepideReportViewer_Backup’ and will be an SQL file type.
  For example: lepideReportViewer_Backup_(19-00-02_21-12-2022)

• This file can then be selected when importing the database

8.5 Application URL

This allows you to change the URL for the Web Console.

• From the Admin Console, select Application URL

• To change the URL, type it into the text box and click Update

8.6 Manage Domains

The Manage Domains option is used to add, delete or edit a domain.

• From the Admin Console, select Manage Domains

• To add a domain, click the Add Domain button and the Add Domain dialog box will be displayed:

• Type the domain credentials and click Add

• To edit an added domain, click the Edit icon

  

• To delete an added domain, click the Delete icon

  

8.7 Subscription

Please refer to https://www.lepide.com/knowledgebase/?page_id=4059103234&slug=using-lepide-reports for details about Subscriptions.

8.8 Configure Notifications

Configuration Notifications can be set up for O365 components, Current Permission Scan Settings and for Data Discovery and Classification. The steps for this are described as follows:

8.8.1 How to Configure Notifications for O365 Components

• Configuration notifications for O365 components can be set up to notify about the following:

• Auditing is Stopped

• Credential is not working

• SQL Data insertion is failed

To enable and configure notifications:

• From the Admin Console window, select Configure Notifications and the following window will be displayed:

• The Azure AD tab is selected by default. The steps explained below also apply to the other O365 components ie OneDrive, Exchange Online, SharePoint Online and MS Teams

• Check one or both of the following options:

  • Notify When Auditing is stopped - to receive an email when auditing stops

  • Notify When Credential is not working – to receive an email when incorrect credentials are used

  • Notify When SQL Data Insertion is failed – to receive an email when SQL Data Insertion has failed

• Specify the regularity of the emails by choosing the number of hours (between 1 and 24) from the drop-down list in the Notification Every x Hour(s) option

• Select the Sender’s Email Account from the drop-down list. If the email does not appear in the list, click the Add New Email Account button to add the email account

• Add the Recipient Email Address(es) in the text box, separating multiple emails with a comma (,).

• Click Apply

8.8.2 How to Configure Data Discovery and Classification Notification

Notifications relating to the scanning status of Data Discovery and Classification are configured in the Web Console. The configuration of Data Discovery and Classification itself is done in the Main Console and instructions on how to do this can be found in the following section: https://www.lepide.com/knowledgebase/?page_id=3856138242&slug=pre-requisites-and-requirements-lepide-identify. Once Data Discovery and Classification has been configured, notifications about the scan status can be enabled in the Web Console and are received by email to the specified email address(es).

To enable and configure notifications:

• From the Admin Console window, select Configure Notifications and the following window will be displayed:

• Click the Data Discovery & Classification tab and the Data Discovery & Classification Notification window will be displayed:

• Check one or both of the following options:

  • Notify When Scan Starts option - to receive an email when the scan starts

  • Notify On Scan Status – to receive regular email updates on the scan status

• Specify the regularity of the emails by choosing the number of hours (between 1 and 24) from the drop-down list in the Notification Every x Hour(s) option

• Select the Sender’s Email Account from the drop-down list. If the email does not appear in the list, click the Add New Email Account button to add the email account

• Add the Recipient Email Address(es) in the text box, separating multiple emails with a comma (,).

• Click Apply

8.8.3 How to Configure Notifications for Current Permission Scan Settings

• Current Permission Scan Settings notifications can be set up to notify about the following:

  • Whenever a CPA scan will start

  • CPA Scan Status for the selected time interval

• From the Configure Notifications screen, select the Current Permission Scan Settings tab

• The following screen will be displayed:

• Check one or both of the following options:

  • Notify When Scan Starts option - to receive an email when the scan starts

  • Notify On Scan Status – to receive regular email updates on the scan status

• Specify the regularity of the emails by choosing the number of hours (between 1 and 24) from the drop-down list in the Notification Every x Hour(s) option

• Select the Sender’s Email Account from the drop-down list. If the email does not appear in the list, click the Add New Email Account button to add the email account

• Add the Recipient Email Address(es) in the text box, separating multiple emails with a comma (,).

• Click Apply

8.9 Manage Components

Please see the individual component Quick Start Guides for details on managing components.