Common investigation scenarios

Check whether the device is registered repeatedly

1. Obtain the Device ID from event or business logs.
2. Go to the visitors page and select the correct application.
3. Search for Device ID.
4. Check the number of events in the past 7 days and the total number of identifications within the storage period.
5. Open the event log and review each registration or identification request.
6. Combine the account number and rights record to determine whether further verification is required.

Investigate whether the device continues to hit risk signals

1. Review the visitor details for risk signals.
2. Record the hit Signal Code.
3. Check the event log for when the signal occurred.
4. Open the specific event details and confirm the device and network environment at that time.

Check device environment changes

1. View recent device properties.
2. Compare historical device/browser combinations.
3. Open the corresponding event according to time.
4. Distinguish between normal version upgrades and abnormal environment changes.