Screenshots gallery¶
Nmap results¶
See Active recon.

Home page with “heatmap” IP addresses.

Scan result details, using the “heatmap” IP addresses to “zoom” in the address space

Screenshots containing the word “solar” and map

Most common products seen on port 80

Help tooltip and most common ENIP vendors
Flow analysis¶
See Flow.

DNS flows with halo to show connected nodes

Flows with details for a specific host

Flows with details for a specific flow

Flow map
Passive network analysis¶
See Passive.
A simple passive analysis demonstration
The data from the previous scene used to create an Nmap-like result
Kibana exploration¶
See IVRE with Kibana.

Domain names tag cloud

Service names tag cloud

Countries / AS numbers pie

Heatmap showing correlations between AS and open ports

World map
IVRE as a plugin¶
See YETI plugin, Cortex analyzer and OpenCTI connector use cases.

Fictitious investigation in Yeti about an IP address used by the archlinux.org domain, based on data from IVRE.

Cortex report about an IP address using data from IVRE.

Fictitious investigation in OpenCTI based on scans data from IVRE.

Fictitious investigation in OpenCTI based on passive data from IVRE.