The sidebar provides the navigation for accessing the core abilities of Sandfly. Through it, you will be able to access pages that add credentials or hosts, perform manual or automated scans for threats, view results, and access all other features of the application.

Main Options

The main sections consist of the following options:

• Dashboard - View the main Dashboard, which shows an operational overview.
• Results - View all alerts, pass and error events, plus access to the Sandfly Hunter.
• Hosts - View registered hosts, add hosts, add jump hosts and add host credentials.
• Drift Detection - Create and view all profiles used for drift detection and profile whitelisting.
• SSH Hunter - A powerful tool to track SSH key usage across your Linux systems.
• AI Analysis - View all generated AI Analysis entries that are available.
• Reports - View reports that provide various views into important data produced by Sandfly.
• Scanning - Initiate a manual scan of hosts, view the task queue, or see the log of scan errors.
• Schedules - An automated scheduler for security scans, host discovery, and drift detection.
• Audit Log - View application-level activities that occur during the use of Sandfly.
• Response Action Log - View a centralized record of all manually requested response actions.
• Jump Hosts - View all configured jump hosts used for connecting to scanned hosts.
• Credentials - View all configured credentials used for connecting to scanned hosts.
• Sandflies - View sandfly threat hunting modules or add your own custom sandfly modules.
• Whitelists - View all hosts with sandfly modules that have been whitelisted.
• Settings - User and system settings, licensing, alert notifications, and server configurations.

Menu Pinning

By default the sidebar menu is pinned so that it shows the full width of sidebar's content. Unpinning it will collapse the sidebar when not in use, thereby freeing up more space for the main content area.