Attack Map
The Attack Map page is a visual representation of the entire network showing real endpoints, Decoy VMs, and ongoing attacks.
To change filtering arguments:
- Go to Incident > Attack Map.
- At the bottom of the Attack Map, drag the timestamp indicator to identify a start and end time. Move the left red arrow to change the start time, move the right red arrow to change the end time.
- Click the Filter Input box to choose a different filter type and type values.
You can input multiple arguments with different filter types. All the filter arguments and the time indicator arguments are considered "AND" conditions.
The filter types are as follows:
- Attacker IP
- Victim IP
- Decoy VM IP
To locate the node in the map:
In the LOCATE box on the right, type the IP address, and press Enter.
To save a snapshot of the map:
Click the Save View 
button.
|
The saved view is associated with the administrator login and will remain saved, including after logging in and out, until the view is reset. |
To change display options:
Scroll the mouse to zoom in and out on the Attack Map.