The Host Investigation area of SSH Hunter provides information that centers around host aspects of SSH key data that is collected by Sandfly.

Table View

The principle page offers search capabilities of textual fields and lists all hosts with discovered or manually added SSH public key data in an easy to use table.

A screenshot of the Host Investigation's data table — Host Investigation - Data Table

Single clicking on a hyperlinked value or double clicking on a row of data, excluding the checkboxes and Action buttons, will open a panel which contains the details of the associated entry.

Detail View

The Summary tab on the pop-out panel provides an initial view of data on an individual SSH host.

A screenshot of the Host Investigation's Summary tab — Host Investigation - Summary Tab

The Explorer area, found in the Summary tab and a larger, dedicated view under the Visualization tab, can expand and collapse its data and the area can be zoomed or moved around in order to follow the relationship between keys, users, and hosts. Below the Explorer is the Key Use Timeline section showing key quantities on the connected hosts over time.

Individual users and their key entries are displayed in a table under the Users & Key Entries tab.

A screenshot of the Host Investigation's Users & Key Entries tab — Host Investigation - Users & Key Entries Tab

Finally, the Zones tab lists all SSH Security Zones for which that host is a member of.