Dashboard
The dashboard is a realm's view over its Cybergraph: a configurable grid of panels that summarize and explore the entities, relationships, and evidence an assessment has collected. Open it from the realm sidebar — it requires Cybergraph access.
At a glance
- What it is — a configurable grid of panels showing a realm's Cybergraph as metrics, tables, counters, and maps.
- When to use it — get a visual overview of an assessment, or build a panel set tuned to the work (OSINT, recon, malware).
- Inputs — a realm with Cybergraph access; a preset (Generic, OSINT, Recon, Malware); for entity tables and counters, a KQL query and optional scope.
- Outputs — a saved grid layout of panels, rendering live counts, tables, maps, and breakdowns from the Cybergraph.
- Related objects — Cybergraph, Evidence, Operations, Realms.
- Common actions — Switch preset, Add a panel, Arrange, Configure, Save.
- API / tool links — UI only — no public API.
Presets
Start from a preset that matches the work, then customize it:
- Generic — a balanced overview of the graph.
- OSINT — collection metrics and pivot candidates for open-source intelligence.
- Recon — coverage of hosts, domains, and services.
- Malware — panels tuned for malware-focused graphs.
Switching presets swaps in that preset's panels; your changes are saved in your browser for this realm.
Panel types
Each panel is one element on the grid:
| Panel | Shows |
|---|---|
| Metrics | High-level counts and graph totals. |
| Entity Map | The most connected entities and how they relate. |
| Entity Table | A searchable table of nodes, backed by a KQL query. |
| Counter | A single KQL count, optionally scoped to a relationship, with an optional list. |
| Source Coverage | A breakdown by source, provider, and vendor. |
| Timeline | Graph entries over time. |
| Activity | Recent entity activity. |
| Risk | The severity distribution across findings. |
Entity tables and counters are driven by KQL, the Cybergraph query language, so a panel shows exactly the slice of the graph you ask for — for example every Domain entity, or findings above a severity.
Build your own
Switch the dashboard into edit mode to compose it:
- Add a panel — pick a panel type and it drops onto the grid.
- Arrange — drag panels to reorder and resize them on the 12-column grid.
- Configure — set a panel's title and, for entity tables and counters, its KQL query and scope.
- Save — your preset, panels, and layout are saved in your browser for this realm, so the dashboard looks the same next time on the same browser. The layout is local to your browser; it doesn't sync across devices or to teammates.
Next steps
- Cybergraph — the graph the dashboard reads from.
- Evidence — trace any node on the dashboard back to the work that produced it.
- Operations — where the graph data the dashboard shows is collected.