jaminb / netviz Goto Github PK

Add a field to Unique IP lists that calls out the first seen timestamp for that IP address

This tool could really benefit from some type of node-to-node relationship visualization. Examples can be found here D3JS Examples

I think that Dendrogram and Sankey diagram could be useful options to start with.

Add the option to delete stored CSVs from the web UI

Total bytes is currently in bytes. It'd be more easily human readable if it was converted to MegaBytes before populating in the UI

It's important to document when the first time hosts are interacted with. Using IP Pair and the first seen timestamp, we could display a timeline of what hosts were involved and when they came into play.

App already does lateral movement detection. Adding a section for SSH and FTP would be beneficial in scoping attacker activity.

Add the ability to upload a CSV and auto analyze on upload