A New Way to Navigate GreyNoise

Over the past year, GreyNoise has moved further right on MITRE ATT&CK, helping defenders detect and investigate activity at the edge, uncover signs of compromise, and analyze the artifacts captured from their own sensors.

Today, we’re introducing a redesigned GreyNoise Visualizer that makes it easier to navigate those capabilities and brings related workflows together in one place.

The most noticeable change is the navigation.

Instead of dropdown menus across the top of the Visualizer, the new experience uses a persistent sidebar organized around three areas:

Dashboards sit at the top, giving you a quick way to return to the intelligence you care about most. 

Watch a quick walkthrough of the redesigned Visualizer, including the new navigation, search experience, and updated investigation workflows.

Search is now available throughout the Visualizer.

Open it from the sidebar, use Command + K, or start from the Visualizer home page. From the same search experience, you can look across IPs, Callback, CVEs, and Tags.

For IP investigations, we’ve also changed how GreyNoise Query Language (GNQL) queries are displayed. Individual search terms can be shown as badges, making it easier to add or remove filters, switch between AND and OR, and refine a search without rewriting the entire query.

Prefer writing GNQL directly? You can switch back to raw query text at any time.

Intelligence, investigation, and action are closer together

Several workflows that previously lived on separate pages now sit directly alongside the intelligence they relate to.