Attack Map¶

Purpose¶

This feature shows users the netflow data stream between devices generating alerts

Helps visualize attack sources, supporting prioritization by geographic region or attack concentration level.
Easily identify abnormal activity patterns (continuous from 1 country, 1 IP range, 1 ISP).
Accelerate triage process when able to determine relationships between multiple alerts through location or attack flow.
Support quick reporting to superiors with visual graphics.