Security Vision's ‘tricks’: navigation and search

Roman Dushkov, Security Vision

We continue publishing the series ‘Security Vision's “Features”’, the purpose of which is to introduce you to interesting solutions in our products. This article is dedicated to the peculiarities of navigation and search tools.

Quick links for navigation

Often, to find the necessary objects among thousands of others, one uses either BI with interactivity or filtering with the use of logical rules. In addition to these mechanisms, the Security Vision platform implements quick links by section. This allows you to switch, for example, between a list of all incidents to incidents of a certain group (VPO, phishing, etc.) or work with groups of IT assets (hosts and servers, printers, network equipment, etc.).

Use tabular lists without having to dive into the details of each asset

The tabular view is used to group cards of similar objects, such as IT assets. Classically, to view the details, you have to ‘dive’ into the right row of a table to run a process or see data. In the Security Vision platform, transactions can be launched directly from the table. This allows the SOC operator to increase the speed of processing a large number of incidents.

Mass transactions and working with large amounts of data

Often, to solve IS tasks, it is necessary to perform a single operation on several objects at once, for example, to run anti-virus scanning on hosts in a dedicated network segment. Security Vision allows you to perform bulk property changes and start processes directly from the tabular list. This feature allows you to change the status, priority, executor and other properties of many objects at once and start a new process for them, such as grouping or deleting.

Performing actions from any object card

The platform supports the ability to create and execute actions in the form of launching atomic workflows for related objects directly from the card field, as well as from the general tabular list of cards. There is no need to navigate to the list of workflows or set up a separate schedule to run them, which increases mobility and autonomy of response and audit teams.

Sort and filter to quickly find any data you need

To quickly find data when there is a large amount of data, it can be convenient to search by specific fields or by all parameters at once. The platform supports not only quick links to open relevant ready-to-use views, but also sorting, searching and filtering functions to select data in real time.