Node groups

For a more compact view, nodes in a graph can be combined into groups. The group is a separate node in the graph; individual nodes in the group are hidden.

To form a group, nodes must meet the following requirements:

• All nodes are of the same type.

  Nodes of the following types can form a group:

  • Standard CyberTrace indicator.
  • External indicator (observable).
  • Detection.
  • Report.
• Each node is connected to the group parent node, and this is the only relationship of the node.

You can group nodes manually or configure the graph so that Kaspersky CyberTrace can group nodes automatically.

Grouping nodes manually

You can group nodes manually if they meet the requirements described above.

To group nodes manually:

1. Select several nodes that you want to group.
2. Right-click any selected node, and then click Group.

Adding nodes to an existing group

You can add nodes to an existing group if these nodes are of the same type as the nodes in the group and they have the same parent node.

To add a node to an existing group:

1. Select both the node being added and the group.

   You can also select multiple nodes to add.

2. Right-click any selected node, and then click Group.

Automatic grouping

You can configure a graph so that Kaspersky CyberTrace can group nodes automatically.

To configure automatic grouping:

1. On a graph page, click the Settings () button.
2. In the Settings dialog, click the Groups tab.
3. Turn on the automatic grouping toggle switch.
4. Specify the minimum number of nodes to group.
5. Click Save.
6. Save the graph if you want the new settings to be applied permanently. Otherwise, the settings will be reset after you finish working with the graph.

A group will be automatically formed when the number of nodes that meet the requirements listed above is equal to or more than what is specified in the automatic grouping settings.

Group panel

Clicking on the group node displays a panel containing information about the nodes in the group, in the form of a table.

In the group panel, you can do the following:

• Search for nodes by using the search box at the top of the panel.
• Sort the table by clicking the sorting icons ( and ) in the column headings.
• Filter the table by using the filter form that appears when you click a column heading.
• Exclude selected nodes from the group by using the Remove from group node button.
• Remove selected nodes by using the Delete button. When you delete a node in the group, this node is completely removed from the graph.