SSH Users
The SSH users page of SSH Investigation provides information that centers around user aspects of SSH key data that is collected by Sandfly.
Table View
The principal page offers username search capabilities and lists all users with discovered SSH key data in an easy-to-use table.
SSH Users - Table
Single-clicking a linked value or double-clicking a row of data, excluding the buttons in the Actions column, will open the Details page of the associated entry.
Detail View
The Summary tab on the Details page provides an initial view of data on an individual SSH user.
SSH Users - Summary Tab
The Explorer area, found in the Summary tab and a larger, dedicated view under the Visualization tab, can expand and collapse its data and the area can be zoomed or moved around in order to follow the relationship between keys, users, and hosts (some data is expanded in the image above). Below the Explorer is the Key use timeline section showing key quantities on the connected hosts over time.
Individual hosts and their key entries are displayed in a table under the Hosts & Key Entries tab.
SSH Users - Hosts & Key Entries Tab
Updated 4 days ago