Versions Compared

Version Old Version 3 New Version 4
Changes made by

Josh Liss (Unlicensed)

AlexI (Unlicensed)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

...

    • Useful for seeing the temporal aspect of associations (the event graph does not include time as a dimension)

Custom Map/Bar Graph Viewer: The equivalent of the "Entity Significance"/"Map" widgets but on the results of custom analytics generated from the Plugin Manager.

Tip 3: Using the source manager and auto-complete

...

i.e. In Entity Significance, enter company or product in the Show only: text box

Info

Two useful tips for using "Show only" text:

  • To avoid matching unwanted substrings, put a space at the end of the string, eg "Vulnerability" (my quotes) will match on Vulnerability and VulnerabilityCategory entities, but "Vulnerability " will only match on the former.
  • You can use regex tricks, eg "Vulnerability|Incident" (my quotes) will match on either of those 2 strings, "https?://" will match on "http://" or "https://" etc

Workspace Filtering

Another option is to filter your result set across the entire workspace, think of this as a temporary sub-query within your query results. Examples:

...

Tip 5: Common use cases for dragging between widgets

The following widgets support drag & drop of entities and/or associations into the Case Visualizer OR into the query bar:

Doc Viewer: For Individual entities, geotags, or associations, select and drag from the list under the document details, or by select the entity/entities and drag the  icon from the widget toolbar. To add all of the entities/associations in a document, check the document in results list and drag the  icon.

Entity Significance: Individual or multiple entities can be selected and dragged out of the widget by holding Ctrl + clicking the desired entities, then dragging the  to the query bar or Case Visualizer. Drag all ten entities by deselecting any individual  and dragging the  button. Multiple terms are ORd together.

Event Graph: to drag individual associations (edges) from the Event Graph to the query bar or Case Visualizer, click on the edge label and drag. Also, copy all nodes/edges currently displayed in the Event Graph by dragging and dropping the  button.

Note some widgets also provide non-drag mechanisms for adding queries:

  • The Significance/Sentiment/Custom Bar Graph widgets let you press the "+" button in the header to add the currently selected entities/text to the query. Note this differs from drag in that all terms are "AND"ed together, whereas dragging "OR"s multiple terms.
  • The Map and Custom Map widgets let you drag a radius box on the map and then add that to the query.
  • The document and event timeline widgets let you select a time range and then use the "+" button in the header to add to the query.

Tip 6: Exporting data as text or images

...