An administer is determining the most recent operation a user performed on the share cifs1within...

In the Anomalies section, view the anomaly rule created for the user with an interval of 24 hours.

In the Audit Trails section, search for the cifs1 share and view the actions on the share over the past 24hour range

In the Audit Trails section, search for the user and view their last operations.

In the Anomalies section, select Users exceed an operation count threshold an input the 24hour range for share cifs1