View user details and host history

In any event view that lists users, click user that appears next to a user identity User icon, or, for users associated with an indication of compromise, Red User icon.

In any users workflow, click the Users terminating page.