← Bob-Wire · c18
precedents/README.md
Precedent Screenshots
Contents
Product screenshots of the incident-map precedents surveyed in ../precedents.md. Downloaded 2026-07-24 from vendor docs/blogs; internal design-research reference only.
Microsoft Defender XDR
| File | Shows | Source |
|---|---|---|
defender-attack-story-play.gif | Animated: "playing" the attack story graph chronologically — alerts/nodes appear in time order | MS Defender docs (GitHub) |
defender-attack-story-entity-details.gif | Animated: clicking a graph node to open the entity pane and take remediation actions | same |
defender-blast-radius-graph.png | Blast-radius graph — top-rated attack paths from a compromised asset | same |
defender-incident-graph-filter.png | Incident graph with filter controls (severity, entity-type hiding) | same |
Amazon Detective
| File | Shows | Source |
|---|---|---|
aws-detective-finding-group-graph.png | Finding-group interactive graph — resources, findings, and their connections for one security event | AWS Public Sector blog |
aws-detective-investigation-report.png | Investigation report summary page that sits alongside the graph | same |
SentinelOne Storyline / Process Graph
| File | Shows | Source |
|---|---|---|
sentinelone-process-graph.jpg | Singularity XDR Process Graph — process execution flow and connections | SentinelOne blog |
sentinelone-process-graph-events.png | Process Graph paired with its events table (graph + tabular record together) | same |
sentinelone-storyline-wastedlocker.png | Storyline view of the WastedLocker ransomware chain, surfacing behaviors the raw OS event view misses | same |
Wiz Security Graph
| File | Shows | Source |
|---|---|---|
wiz-attack-path-analysis.png | Attack path visualization — CVE + brute-force findings chained to data access | Google Cloud architecture docs |
wiz-security-graph-log4j.png | Security Graph of cloud resources associated with a Log4j vulnerability | same |
Not captured
- CrowdStrike Falcon incident graph — public material is video-only (Falcon Insight XDR walkthrough); console screenshots sit behind the customer portal.
- Cortex XDR Causality View — docs pages render images behind scripts/WAF (fetch attempts 403'd); see the Causality View doc for the textual description used in the survey.