User Guide
Attack Surface Management
Monitors hosts and service ports exposed to the internet.
Service Statistics
Displays the number of detections by service type over the last 30 days. Even for the same service port, detection counts are accumulated for each day.
Service Discovery Trends
Displays daily service detection trends. If detections have increased compared to the previous day, they should be reviewed carefully.
Newly Discovered Services
Displays the list of service ports newly discovered compared to the previous day. Review carefully to determine whether these are unintended service port exposures.
quaxar-exposed-services duration=1w | stats min(published) as published by ip, port, service
| sort -published
| fields ip, port, service, published
| search published >= ago("2d")
| join type=leftonly ip, port [
quaxar-exposed-services duration=1w | stats min(published) as published by ip, port, service
| sort -published
| fields ip, port, service, published
| search published < ago("2d")
]
Service Port Scan History
Displays service port detection history over the last week.
Talon Reports
Retrieves the list of reports published by the S2W Talon team within the last 24 hours. Click a title to view the content in a popup.
Security News
Retrieves the list of security news from the last 24 hours. Click a title to view the content in a popup.
Vulnerability Reports
Retrieves the list of vulnerability reports from the last 24 hours. Click a title to view the content in a popup.
Open Source Indicators of Compromise
Retrieves the list of open source indicators of compromise (Open IoC) from the last 24 hours. Click a title to view the content in a popup.
