Data Panels Overview¶
Data panels present domain intelligence in focused, specialized containers. Each panel provides a different perspective on domain data, from DNS resolutions to SSL certificates to historical WHOIS records.
What are data panels?¶
Data panels are modular interface components that display specific types of domain information. They work together to provide a comprehensive view of domain intelligence while allowing you to focus on the aspects most relevant to your investigation.
Available data panels¶
Domain-focused panels¶
Domain Profile : Snapshot of all domain-related data in one panel. Provides quick overview of key attributes including risk score, DNS, WHOIS, and web content.
Domain History : Timeline showing how a domain has evolved over time. Tracks changes to WHOIS data, DNS records, web content, screenshots, and SSL certificates.
WHOIS History : Historical WHOIS records showing registration changes over time. Compare records side-by-side or view inline differences.
Screenshot History : Archived website screenshots showing visual changes over time. Browse through historical captures of the domain's website.
DNS and network panels¶
Passive DNS (pDNS) : Current and historical DNS resolutions. Shows domain-to-IP mappings, name servers, mail servers, and other DNS records with timestamps.
IP Profile and IP Tools : IP address information including WHOIS data, geolocation, and network tools (ping, traceroute, PTR lookup).
Security panels¶
SSL Profile : SSL/TLS certificate details including validity dates, issuer, subject, and alternative names. Provides pivots on certificate attributes.
Analysis panels¶
Stats : Statistical analysis of result sets. Shows distribution of values across fields with charts and tables.
Visualization : Graph-based view of domain connections. Visualizes relationships between domains and their attributes.
Navigate data panels¶
Panel tabs¶
Data panels appear as tabs across the top of the interface. Select a tab to view that panel's content.
Panel selector¶
Use the hamburger menu on the far right of the tab ribbon to:
- Show or hide specific panels
- Reorder panel tabs
- Reset to default layout
Resize panels¶
Adjust panel width using the resize icon on the far right of each panel's title bar.
Panel settings¶
Most panels include a settings icon (gear icon) in the title bar. Settings options vary by panel but commonly include:
- Display preferences
- Column selection
- Filter options
- Sort order
Panel interactions¶
Context-aware loading¶
Panels automatically populate with data for the selected domain in the Pivot Engine. When you:
- Select a different domain in the Pivot Engine
- Pivot to a new search
- Navigate to a previous search node
The panels update to show information for the current domain.
Cross-panel navigation¶
Many panels provide links to other panels:
- Operations Menu: Right-click values to open related panels
- Panel links: Direct links to relevant panels (for example, "View in pDNS")
- Pivot actions: Create searches that populate other panels
Persistent display¶
Data panels remain populated with the selected domain's information even when:
- Creating new branches
- Performing searches with no results
- Navigating through search history
This allows you to reference domain information while exploring related domains.
Common panel features¶
Update content button¶
Several panels include an Update Content button to manually trigger data collection:
- Domain Profile
- Screenshot History
- SSL Profile
Use this to refresh web-related data outside of automatic collection schedules.
Export options¶
Many panels support data export:
- Pivot Engine: CSV, STIX 1.2, STIX 2.0
- pDNS: CSV, JSON
- Stats: Included in investigation reports
Operations menu integration¶
Most panels integrate with the Operations Menu:
- Right-click values to pivot
- Access related panels
- View additional context
Panel workflow¶
A typical investigation workflow uses panels in sequence:
- Pivot Engine: Review search results, select a domain.
- Domain Profile: Get quick overview of the domain.
- pDNS: Examine DNS history and current resolutions.
- WHOIS History: Review registration changes.
- SSL Profile: Analyze certificate details.
- Stats/Visualization: Identify patterns across results.
Best practices¶
Panel selection¶
- Keep relevant panels visible: Hide panels you're not using to reduce clutter
- Reorder for workflow: Place frequently-used panels first
- Use keyboard shortcuts: Learn shortcuts for faster navigation
Data refresh¶
- Update web content: Manually refresh for high-priority domains
- Check timestamps: Note when data was last collected
- Understand collection schedules: Know when automatic updates occur
Analysis approach¶
- Start broad: Use Domain Profile for overview
- Drill down: Move to specialized panels for details
- Cross-reference: Compare data across multiple panels
- Document findings: Use search notes to capture insights
Next steps¶
Explore individual panel documentation:
- Domain Profile: Most comprehensive overview
- Passive DNS: DNS resolution history
- WHOIS History: Registration changes
- SSL Profile: Certificate analysis
- Stats: Statistical analysis
- Visualization: Relationship graphs