The Process Graph Tab visually maps how analysts recorded investigations within a use case. It provides a flow diagram showing how different tools and steps interact across recorded sessions.
Each node represents an investigative step (such as Review Security Incidents or Investigate Indicators), while connecting lines show the flow of actions across different tools.
Key Elements:
Nodes: Represent actions, investigations, or data collection steps.
Connections: Indicate the order and frequency of transitions.
Tool Labels: Identify integrations used (e.g., Defender, Splunk, AbuseIPDB, VirusTotal).
Completion Percentages: Display how often each step was reached across sessions.
Filters
Use the filters at the top of the graph to adjust your view:
Select Analyst: View the process flow for specific users.
Select Range: Analyze data for a particular time period.
This allows you to understand how investigations evolve, identify inefficiencies, and optimize workflows.
Use Case Summary
Recordings: Total manual investigations analyzed for the graph.
Last Updated: Timestamp of the latest visualization update.
The Process Graph is especially useful for identifying trends, common paths, and potential automation opportunities.