By Tony Lee
Welcome to part II in this series of going from zero to hero using Power BI to ingest, process, and make amazing reports. If you have read some of our other articles you can probably tell by now that we enjoy making data actionable. Honestly, it doesn't matter what type of data or even where the data ends up. As long as we can make informed decisions using the data -- we love it. Following in this theme we are going to make BlackBerry (formerly known as Cylance) Protect Threat Data Report (TDR) CSVs actionable using Power BI and Power BI Desktop. You can use any data source to follow along in this series, but our example BlackBerry Protect report is shown below which we will happily share the Power BI file at the end of the series for you to load and analyze your own data, so stay tuned for that!
|Figure 1: Our Power BI report using BlackBerry Protect TDR data|
In the first article, we covered:
- Getting Started
- Data Ingest
- Adjusting Fields
- Saving Your Work
- More Visualizations
- Text box
- Pie Charts
- Using Reports and Dashboards
- Uploading Reports to Power BI Service (Online)
Just a quick note for folks that are familiar with excel tabs. In Power BI, they work much the same. Since the canvas size is somewhat fixed in size, tabs might come in handy for building multiple reports and overcoming canvas limitations.
|Figure 2: Shows boundaries and tabs|
In the first article, we showed you how to add an event count, which essentially counted the number of rows in our BlackBerry Protect Threat Data Report. We started off with an easy visualization and will progress to more difficult ones.
We are fans of being able to quickly glance at a dashboard and know what it is... thus a simple text box at the top is a great way to accomplish this task. Insert > Text Box. Then get fancy fancy with the background color and font. We will get even fancier in a later article using images with hyperlinks, but let's crawl, walk, then fly.
We are also fans of being able to interact with the data by carving and drilling down into interesting events. For this, we use a slicer (Power BI term), also known as a filter to the rest of the world. ;-) In our BlackBerry Protect example, we are filtering on multiple fields using a checkbox in most cases. To do this, simply click in the canvas, click on the slicer icon, drag the field you want to filter on, and bob's your uncle.
|Figure 3: Check box filters (aka slicers)|
Doughnut and Pie Charts
- ThreatsDataReport is our table, the entries in the brackets  are the columns
- ALLSELECTED is so our slicers (filters) still work when selected
|Figure 5: Creating a measure and a doughnut chart in Power BI|
Doughnut and Pie Charts - Cont.
|Figure 6: Create a pie or doughnut chart while avoiding DAX|
|Figure 7: Creating a treemap using the malware classifications|
Note: Most visualizations apply a filter when clicked. Not all of them are very intuitive in how to clear the filter. For the treemap, either click the box you already clicked or click the top left box to clear the filter.
Using Reports and Dashboards
Uploading Reports to Power BI Service (Online)
|Figure 8: Uploaded .pbix to Power BI Service workspace|
|Figure 9: Entering full screen presentation mode|