Skip to main content
The Entity Context Graph is the centerpiece of the Workbench. It provides an interactive visual map showing every entity involved in an incident and how they’re connected.

​
Supported Entity Types

Entity TypeIconExample
User👤john.doe@contoso.com
Device💻DESKTOP-ABC123
IP Address🌐203.0.113.45
URL🔗malicious-site.example.com
File📄suspicious.exe (SHA-256)
Email✉️Phishing email subject line

​
Interacting with the Graph

  • Click an entity to see its details and available Gamebook actions
  • Hover over connections to see the relationship type
  • Zoom and pan to navigate large graphs with many entities
  • Select entities to add response actions to your Gamebook

​
Why It Matters

The Entity Context Graph immediately answers the critical investigation questions: Who is affected? What devices are involved? What’s the blast radius? Instead of piecing together information from multiple consoles, you see the full picture in one view. For the full reference, see the Entity Context Graph documentation.