Compare trends and snapshots

Investigate posture movement and changed observations within your history window.

Review the exposure trend

  1. Open the asset overview and follow Exposure trend from its score history.
  2. Select an available time range. Longer ranges can be unavailable under your plan.
  3. Review the score movement and stored drivers for the dates involved.
  4. Return to the live overview to compare the latest recorded posture and current finding assessments.
Exposure trend chart and observation history for an example asset
Compare the Exposure Score trend with the recorded change history. The image shows the first rows. Select the image to enlarge it and inspect the details.

Inspect snapshot history

  1. Open Snapshots on the asset.
  2. Select a target, snapshot type, and available date range.
  3. Sort by observation time and expand the relevant changed state.
  4. Compare its recorded evidence and timestamps with the related event or finding.
  5. Clear the filters to check whether the apparent gap came from your selection.
Snapshot History with collection groups and observed times
Snapshot History separates first seen and last seen times for observations. The image shows the first rows. Select the image to enlarge it and inspect the details.

Expected outcome

You can distinguish score movement from changes in the underlying observation. Identical observations update Last observed instead of creating duplicate snapshot rows. A sparse change history does not necessarily mean monitoring stopped.

History depth depends on the current plan. Timestamps use your profile timezone. Incomplete or failed collection is not evidence that an earlier issue has disappeared; check the latest successful observation.

Screenshot

Scroll to inspect the image, or choose Fit image to see the whole screen.