The Jupyter Notebook has been a staple of the data science community for years, acting as the foundational tool for investigating data. The notebook provides a powerful interactive Python interface to data, allowing for quick iteration and in depth exploration.
Grapl puts the powerful capability of a Jupyter Notebook front and center for your incident response, and combines it with its graph based approach.
Notebooks are used to pivot off data in your suspect graph and explore the information more deeply, while Grapl provides a realtime graph visualization of the data you’re working with.
Here we can see an investigator pivoting off of some suspicious data, quickly adding new context to the graph.
And, correspondingly, Grapl’s graph visualization immediately shows the new context.
By combining the exploration power of a Jupyter Notebook with the visual and pivoting capabilities of a graph, Grapl can speed up investigations and help you quickly scope attacks.