Investigations
New Investigation
No triggered detection runs yet. Run detections from the Rules & Queries page first.
matches ·
Loading...
No investigations yet. Create one above.
Active Investigations ()
| Name | Status | Nodes | Edges | Created | |
|---|---|---|---|---|---|
Nodes
Edges
Node Types
Created
Loading...
Investigation Graph
Click nodes to inspect. Scroll to zoom.
Principal
IP Address
Resource
API Operation
Finding
Event
— Network Flow
- - DNS
Node:
| ID | |
| Events | |
| First Seen | |
| Last Seen |
Edge:
| Source | |
| Target | |
| Flow Records | |
| Bytes In | |
| Bytes Out | |
| Ports | |
| Protocol | |
| First Seen | |
| Last Seen |
Timeline
Loading timeline...
Generating report...
Investigation Report
Nodes
Edges
Principals
IPs
Entity Breakdown
| Type | Count |
|---|---|
Principals
IP Addresses
API Operations
Security Findings
Timeline Events ()
| Time | Event | Tag |
|---|---|---|
Time Range
→