Host Investigation

The Host Investigation area of SSH Hunter provides information that centers around host aspects of SSH key data that is collected by Sandfly.

Table View

The principle page offers search capabilities on various host fields and lists all hosts with discovered or manually added SSH public key data in an easy to use table.

A screenshot of the Host Investigation data table

SSH Hunter - Host Investigation Data Table

Clicking anywhere on a row of data, excluding the explorer icon, will open a page that contains additional details associated to that entry.

Detail View

Under the Visualization tab the nodes in the Explorer section can be expanded and the panel can be zoomed or moved around in order to follow the relationship between keys, users, and hosts. Below the Explorer is the Key Use Timeline showing key quantities on that host over time.

SSH Hunter - Host Summary View (1 of 2)

SSH Hunter - Host Summary View (1 of 2)

Individual users and their key entries are displayed in a table under the Users & Key Entries tab.

SSH Hunter - Host Summary View (2 of 2)

SSH Hunter - Host Summary View (2 of 2)

Finally, the Zones tab lists all SSH Security Zones that host is a member of.