Skip to content

Graph

The Graph page is an interactive canvas that maps what every endpoint reaches: processes, files, credentials, cloud resources, and the edges between them.

What you see

Common tasks

  1. Use the search bar in the header to find a node by hostname, process name, or identifier, then click a result to set it as the focus node and expand its neighbourhood.
  2. Click a suggestion chip in the empty-canvas state (populated from agent nodes already in the graph) to jump straight to a host without typing.
  3. Click any node on the canvas to open the Details panel on the right, showing node attributes, provenance, and incident edges.
  4. Right-click a node to access the context menu: trace a path to another node, show provenance, or find similar nodes.
  5. Use the Time scrubber at the bottom to rewind the graph to a past timestamp; live updates pause automatically while the scrubber is active.
  6. Toggle edge types in the Filter sidebar on the right to hide noisy relationship categories (e.g. heartbeats) and focus on the edges that matter.

Filters / shortcuts

The Filter sidebar lets you toggle individual edge types on or off and set a freshness window (default: last 7 days). The hops slider controls how many relationship hops to expand from the focus node.

The Diff mode toggle in the time scrubber lets you compare two timestamps: edges that appear in only one snapshot are highlighted.