INTEL_GRAPH
Relationship graph
Neighborhood view for indicator-centric investigations — expand nodes in the canvas or narrow server filters via the query string.
Graph
Pass indicator_id= to center. Client filters below further narrow the payload. Search context (sq/prov/rk) is preserved in the URL for analyst continuity.
Why the graph?
Neighborhood view links sightings, related indicators, and promotion paths for this IOC
The graph centers indicator #661 so you can validate blast radius, compare pivots, and jump back to structured detail without losing your search thread.
Large graph (102 nodes). Filters and focus mode recommended.
{
"node_count": 102,
"edge_count": 137,
"relation_types": {
"mentions": 93,
"sightings_summary": 2,
"ingested_via": 2,
"mentioned_in": 36,
"linked_to": 1,
"enriched_by": 3
},
"node_types": {
"intel_report": 92,
"connector": 2,
"sighting_aggregate": 3,
"enrichment": 3,
"alert": 1,
"indicator": 1
},
"compressed": true,
"pre_compression": {
"node_count": 114,
"edge_count": 149
}
}{
"edges": []
}