## Overview

Trace Active
Time Severity Alert MITRE Status Actions

#### Hunt Query

#### IOC Summary

#### Webhook Ingest

POST external alerts to `/api/integrations/ingest`

Webhook URL (register)
Time Actor Action Resource
Active Profiles
0
Threats Detected
0
Critical Status
0
Requests Analyzed
0

#### Threat Timeline Activity

#### Anomalies Breakdown

#### Local Client DNA Telemetry

Computing client DNA fingerprint...

#### Visitor Risk Assessment

LOW
Calculated Risk Score
0/100

#### Recent Security Alerts

Telemetry stream active

#### Real-Time Visitors Map

0 requests

Live arcs from each visitor’s IP to your protected application — green = success, red = not found, blue = redirect.

2xx OK 301/302 4xx / 404 Your server

#### Live request stream

IP | Status | Request
--- | --- | ---

#### Top countries (session)

Profile ID / Key Threat Level Total Requests Risk Score Known IPs Known Devices

Scanning profiles collection...

Detected Time Severity Anomalies / Trigger Risk Score IP Address

Monitoring threat intelligence feed...

### Route Monitor

0
Total Requests
0
Blocked
0
High Risk
0
Unique IPs
0
Registered Routes

Time | Method | Path | IP | Risk | Status | Actions
--- | --- | --- | --- | --- | --- | ---
Loading...

Method | Path | Registered | Requests | Last Request
--- | --- | --- | --- | ---
Loading...

#### Platform Database (SOC persistence)

Mode
Host
Port
Database
User
Password
PostgreSQL URI
Managed by GhostTrace (SQLite). Connect external databases under Data Sources for monitoring.

#### Data Sources

No databases connected

#### Active Monitoring Jobs

No active scan jobs

#### Connect Database Server

Unique ID
Display Label
Database Type
Connection Mode
Connection Port
Connection URI Supports postgresql://, mysql://, mongodb://, redis://
Host / IP Address Docker: use host `postgres`
Database Name
Schema (PostgreSQL)
Username
Password
Advanced options
Pool max
Timeout (ms)
Strict SSL verify
Require SSL/TLS Connection

#### Schema Tables

Data Integration Hub

Select a data source on the left to inspect its schema or connect a new database instance.

#### SQL/NoSQL Query Playground Console

Execute SQL/NoSQL queries against the security database.

#### Real-Time Database Event Streams

Stream idle. Awaiting database transactions...

#### AI Provider Configuration

Supports OpenAI, Claude, Gemini, Grok, Ollama, and custom OpenAI-compatible APIs.

Profile name
Provider
API Key
Base URL (optional)
Model
Default provider Enabled

#### Live Log Analysis

Auto-analyze suspicious logs with AI
Slow request threshold (ms)

Triggers on 4xx/5xx, slow responses, and attack patterns in body.

#### AI Playground

#### Configured Providers

Live AI
Method Route Status AI Risk Time

#### Live AI Insight

Select a log or wait for live analysis

#### Configure Sandbox Transaction

Client ID / User ID
Account Reference ID
Action Event
Route Endpoint
Network IP
Network Geolocation
Device Platform
User Agent Header
JSON Request Body Payload

#### Real-time Telemetry Evaluation

AI Engine Sandbox Ready

Configure transaction details on the left, then click 'Trigger AI Behavior Engine' to execute anomalies extraction, risk indexing, and LLM text justification.
Rule Name / Purpose Trigger Selector Threshold Assigned Action Policy Status

Syncing system firewall policies...

### Team Members

Manage analyst and viewer accounts for this installation.

Name / Email Role Status Last login Actions

Loading team...

### Add User

Name
Email
Role
Password
Active account
Record details