dragos/dragos_platform Dashboards | Integrations | LogScale Documentation

Skip to content

LogScale Documentation Full Library Knowledge Base Release Notes Integrations Training API GraphQL API Contacting Support

dragos/dragos_platform Dashboards

Configuration

Widget	Description	Type
Configuration Detections by Severity	Configuration Detections by Severity Hide Query Show Query logscale `detection_quad="Configuration" \|groupBy("severity") \| sort(severity)`	`Pie Chart`
Configuration Detection Count Over Time	Configuration Detection Count Over Time Hide Query Show Query logscale `detection_quad="Configuration" \| timeChart()`	`Time Chart`
Configuration Detections by Tactic	Hide Query Show Query logscale `detection_quad="Configuration" \|groupBy("attack_tactic") \| sort()`	`Bar Chart`
Configuration Detections	Hide Query Show Query logscale `detection_quad="Configuration" \| Time:= formatTime("%m/%d/%Y %H:%M:%S", field=@timestamp) \| rename("detection_quad", as="Detection Quad") \| rename("severity",as="Severity")\| rename("summary",as="Summary") \| rename("attack_tactic",as="Attack Tactic")\| rename("attack_technique",as="Attack Technique")\| table([Severity, Time, "Detection Quad", "Attack Tactic", "Attack Technique", Summary]) \| sort(Time)`	`Table`

Indicator

Widget	Description	Type
Configuration Detections by Severity	Configuration Detections by Severity Hide Query Show Query logscale `detection_quad="Configuration" \|groupBy("severity") \| sort(severity)`	`Pie Chart`
Configuration Detection Count Over Time	Configuration Detection Count Over Time Hide Query Show Query logscale `detection_quad="Configuration" \| timeChart()`	`Time Chart`
Configuration Detections by Tactic	Hide Query Show Query logscale `detection_quad="Configuration" \|groupBy("attack_tactic") \| sort()`	`Bar Chart`
Configuration Detections	Hide Query Show Query logscale `detection_quad="Configuration" \| Time:= formatTime("%m/%d/%Y %H:%M:%S", field=@timestamp) \| rename("detection_quad", as="Detection Quad") \| rename("severity",as="Severity")\| rename("summary",as="Summary") \| rename("attack_tactic",as="Attack Tactic")\| rename("attack_technique",as="Attack Technique")\| table([Severity, Time, "Detection Quad", "Attack Tactic", "Attack Technique", Summary]) \| sort(Time)`	`Table`

Modeling

Widget	Description	Type
Configuration Detections by Severity	Configuration Detections by Severity Hide Query Show Query logscale `detection_quad="Configuration" \|groupBy("severity") \| sort(severity)`	`Pie Chart`
Configuration Detection Count Over Time	Configuration Detection Count Over Time Hide Query Show Query logscale `detection_quad="Configuration" \| timeChart()`	`Time Chart`
Configuration Detections by Tactic	Hide Query Show Query logscale `detection_quad="Configuration" \|groupBy("attack_tactic") \| sort()`	`Bar Chart`
Configuration Detections	Hide Query Show Query logscale `detection_quad="Configuration" \| Time:= formatTime("%m/%d/%Y %H:%M:%S", field=@timestamp) \| rename("detection_quad", as="Detection Quad") \| rename("severity",as="Severity")\| rename("summary",as="Summary") \| rename("attack_tactic",as="Attack Tactic")\| rename("attack_technique",as="Attack Technique")\| table([Severity, Time, "Detection Quad", "Attack Tactic", "Attack Technique", Summary]) \| sort(Time)`	`Table`

Overview

Widget	Description	Type
Attack Tactics and Techniques	Hide Query Show Query logscale `sankey(source="attack_tactic",target="attack_technique")`	`Sankey`
Attack Tactic	Hide Query Show Query logscale `groupBy("attack_tactic")`	`Pie Chart`
Detection Quad	Hide Query Show Query logscale `groupBy("detection_quad")\| sort()`	`Pie Chart`
Detection Count Over Time	Detection Count Over Time Hide Query Show Query logscale `timeChart(detection_quad)`	`Time Chart`
Alerts	Hide Query Show Query logscale `* \| Time:= formatTime("%m/%d/%Y %H:%M:%S", field=@timestamp) \| rename("detection_quad", as="Detection Quad") \| rename("severity",as="Severity")\| rename("summary",as="Summary") \| rename("attack_tactic",as="Attack Tactic")\| rename("attack_technique",as="Attack Technique")\| table([Severity, Time, "Detection Quad", "Attack Tactic", "Attack Technique", Summary]) \| sort(Time)`	`Table`
Severity	Severity Bar Chart Hide Query Show Query logscale `groupBy("severity")\| sort("severity")`	`Bar Chart`

Threat Behavior

Widget	Description	Type
Configuration Detections by Severity	Configuration Detections by Severity Hide Query Show Query logscale `detection_quad="Configuration" \|groupBy("severity") \| sort(severity)`	`Pie Chart`
Configuration Detection Count Over Time	Configuration Detection Count Over Time Hide Query Show Query logscale `detection_quad="Configuration" \| timeChart()`	`Time Chart`
Configuration Detections by Tactic	Hide Query Show Query logscale `detection_quad="Configuration" \|groupBy("attack_tactic") \| sort()`	`Bar Chart`
Configuration Detections	Hide Query Show Query logscale `detection_quad="Configuration" \| Time:= formatTime("%m/%d/%Y %H:%M:%S", field=@timestamp) \| rename("detection_quad", as="Detection Quad") \| rename("severity",as="Severity")\| rename("summary",as="Summary") \| rename("attack_tactic",as="Attack Tactic")\| rename("attack_technique",as="Attack Technique")\| table([Severity, Time, "Detection Quad", "Attack Tactic", "Attack Technique", Summary]) \| sort(Time)`	`Table`

Enter search term