Custom Dashboards

Overview 

RiskIQ's Dashboards allow our users to visualize the metrics that matter most to their organization, revealing key insights quickly and efficiently. RiskIQ provides default dashboards that showcase the findings we consider useful, but users can also create customized charts based on any quer(ies) to address their specific reporting needs.  These dashboards are designed to be both high-level and operational; users can deliver summaries to their executives and also action our data using the same mechanism. 

Using Dashboards 

Accessing Dashboards

To access these new dashboards, open the left-hand navigation panel and click "Custom Dashboards."  These dashboards are currently flagged as a beta offering; we are actively improving them and appreciate any feedback.  

Figure 1 - navigating to Custom Dashboards 

Figure 2 - Custom Dashboard Page with left-hand navigation showing available dashboards

Dashboard Types

You will see three different dashboard categories in the left-hand navigation: 

  • RiskIQ Managed Dashboards:  Default dashboards created by RiskIQ.  RiskIQ will automatically update these dashboards periodically to provide new insights into your attack surface.  These dashboards cannot be edited or changed; however, you can create a new dashboard using any of the below listed default dashboards as a template.  When saved as a workspace or private dashboard, you will have full editing capabilities.

    • Digital Footprint Summary:  a high-level dashboard that provides a summary on your footprint's security posture.  On this dashboard, you can see an overview of your attack surface and other key metrics like cloud providers, server / framework distribution, data storage / network / remote access services, SSL certificate posture, CVSS distribution and more.  
      • Services, Applications, Devices & Threats:  a more comprehensive view of critical exposed services, APT threats, application hosting, and general usage of services.
      • Cloud Insights:  An overview on your cloud providers, including a provider usage overview across your whole footprint, as well as usage by domain.  
      • Domain Asset Insights:  A view of all domain assets, including total owned domains vs. newly added domains, registration expiration timelines, EPP status codes, WhoIs information, Alexa rankings and host counts.
      • Page Asset Insights A view of all page assets, including total vs. newly added owned pages and websites, error response codes, error messages, site languages, and page security policies.
      • IP Asset Insights A view of all IP assets, including total vs. newly added IPs, IP blocks and ASNs, IP address reputation, and WhoIs information.
      • Host Asset Insights A view of all host assets, including total vs. newly added hosts, the associated domains and ASNs to a host, and Alexa rank.
      • SSL Asset Insights A view of all SSL assets, including total vs. newly added SSL certificates, live sites without HTTPS, expiration ranges, certificate integrity, issuer name and signature algorithm.


        Figure 3 - Digital Footprint Summary 


    • External Threats Summary:  A quick summary of all events in our External Threats platform across all module(s) purchased.  This can include Content, Phish, Rogue Mobile Apps, Domain Infringement, Social, or Custom events. 
      • Domain Threats A view of all domain infringement events, including active vs. newly created events, the site usage of these domains, email capability, and domains by keyword, registrar, ASN or country. 
      • Phishing Threats:  A view of all phish events, including active vs. newly created phish, active events reported for browser blocking or currently blocked, and phish by country, domain, ASN, registrar and target brand. 
      • Mobile Threats A view of all mobile app events, including active vs. newly created mobile apps, app store country and type, the applicable app store, and blacklisted or unofficial mobile apps. 
      • Social Threats A view of all social events, including active vs. newly created social profiles, social networks, social profile links, profile names, and event source. 
         
        NOTE:  the original Events, Global Phishing, Inventory and Inventory Changes dashboards are also visible in this list. They are not on the new visualization framework and therefore have less functionality. We will be updating them soon.

  • Workspace Dashboards:  These dashboards are available to every user with access to a workspace.  You can create dashboards from scratch using saved queries, or use a pre-existing template.  Users can edit these dashboards (titles, headers, layout, text boxes) and the charts within them (add or remove queries, change chart type, limit visible results, segment chart by additional filter, etc.)

  • My Dashboards:  These dashboards are available to an individual user; they are hidden from all other users in a workspace.  You can create these dashboards from scratch using saved queries, or use a pre-existing template.  Users can edit these dashboards (titles, headers, layout, text boxes) and the charts within them (add or remove queries, change chart type, limit visible results, segment chart by additional filter, etc.)

Chart Types  

We currently offer five different chart types:

  • Single Number / Count:  A tile displaying a single count.  While you can use this visual to represent multiple queries, we highly recommend you limit Single Number / Count tiles to single queries and instead use the Number List for multiple queries.  This tile shows all New Owned Domains Added (Past 30 Days).  Please note the tool tip -- you can hover over it to see a description of the tile.

    Figure 4 - Single Number / Count Tile 

  • Insight Tile:  A tile displaying a single count with a coinciding description. Similarly to the "Single Number / Count" option, we highly recommend you limit Insight Tiles to single queries and instead use the Number List for multiple queries.  This tile shows Total Owned Domains that have been approved.

    Figure 5 - Insight Tile 
     
  • Number List:  a numeric list of multiple counts, separated by the selected "group by" option.   If using multiple queries, the only grouping option will be the queries themselves. This chart shows all Approved Inventory assets as grouped by "type".

    Figure 6 - Number List 

  • Bar Chart:  a bar chart, aligned either horizontally or vertically, that can represent a single query or multiple queries.  This chart type also supports "group by" options based on any of RiskIQ's available facets; it is also the only chart type that supports additional filtering by segment.  If using multiple queries, the only "grouping option will be the queries themselves.  The chart below showcases all approved domains as grouped by expiration date and segmented by organization.

    Figure 7 - Segmented Bar Chart 

  • Pie Chart:  a pie chart representing either a single query or multiple queries. This chart supports "group by" options" based on our available facets. If using multiple queries, the only "grouping option will be the queries themselves.  The chart below shows host counts as broken down by domain.
    Figure 8 - Pie Chart 


Interacting with Dashboards

All Dashboards: 

  • Descriptions 
    • Many visualizations will have a tooltip by the title.  Hovering over this box will provide a description of the dashboard. Figure 9 - description in tool tip over chart

  • Clickthrough to Results 
    • Every dashboard offers clickable segments.  If you click a specific component of a graph (e.g. a sliver of pie, a segment of a stacked bar chart), you will be redirected to the full results of assets or events contained in the component.
      Figure 10 - Clickthrough from bar chart to search results 

  • Reporting
    • From any dashboard, you can opt to either immediately download a PDF of the dashboard, or you can opt to schedule the delivery of the PDF to designated email addresses.  

      Figure 11 - Schedule & Print icons from dashboard 

    • Printing to PDF will automatically begin the download of a PDF of the dashboard page. 
    • Scheduled delivery of PDFs will prompt you to configure your delivery.  You will need to enter a Report Name, Report Frequency (weekly, monthly, quarterly), Run On Date (day of week or month), email addresses to deliver to, and a custom description (optional).  After saving this configuration, you can view previous reports or edit the schedule from the Reporting section of RiskIQ.

      Figure 12 - Scheduled PDF Configuration Options 

Workspace and Personal Dashboards:

Unlike RiskIQ Managed Dashboards, users have a lot of editing functionality available to them within Workspace & Personal Dashboards.  If you would like to make a RIQ Managed Dashboard editable, simply add a new dashboard and select the desired template (details below). 

  • Editing Dashboard Layout 
    • Select the pencil icon in the upper right hand corner to edit the layout of a dashboard. 
    • You are able to retitle a dashboard, provide a description for it, or delete it. 
    • Headers: 
      • Headers enable you to more thoroughly organize charts on a dashboard into thematic groups.
    • Text:
      • Users can add text boxes with titles and descriptions. These boxes enable you to add more context around a specific metric; this is useful for describing the value of a visual to all RiskIQ users within your organization. 
    • Drag & Drop Layout: 
      • Users can move dashboard components (charts, headers, and text boxes) to different locations on the dashboard. Simply drag and drop any component to change the layout.

        Figure 13 - Layout Options 

Adding New Dashboards 

A user can create a brand new dashboard, either from a template or from scratch. 

  • From the dashboard page, select "+Add" in the top-left corner on the navigation bar. 
  • Enter a name for your dashboard. 
  • If desired, select a template.  You can use copy over any pre-existing dashboard and use it as a template.  This is particularly useful when a user wants to make edits to a RiskIQ Managed Dashboard. 
  • Determine the privacy settings for the dashboard.  A user can make it a workspace dashboard, allowing any other user to see it, or private to them only. 
  • Add a description of the dashboard. 
  • Upon saving, the new dashboard will appear in the designated section (Workspace Dashboards or My Dashboards).

    Figure 14 - Add New Dashboard from Template

Add or Edit Chart  

For Workspace & Personal Dashboards, a user can elect to add a brand new chart or edit a pre-existing chart.  

Add a New Chart 

  • In the top-right corner, select the Add Chart icon.
    Figure 15 - Add Chart to Dashboard  

  • The following fields apply to any visualization type
    • Name:  provide a name for your chart
    • Description:  a description of the data represented in your chart
    • Chart Type:  select an insight tile, single count, number list, bar chart or pie chart
    • Data Source:  Global Inventory, Events, Enforcements
    • Saved Queries:  select the quer(ies) with which to built chart
    • Limit Maximum Number of Grouping Entries:  a sliding toggle that enables you to limit the number of results that appear in their own section of a chart.  All other results will be grouped into an "other" category.  

      Figure 16 - Limit Maximum Number of Grouping Entries 

  • The following fields apply to bar charts only: 
    • Orientation: horizontal or vertical 
    • Segment By:  adds an additional layer of filtering that is visualized in stacked bar charts

      Figure 17 - Segment Chart by Organization 

  • The following fields apply to bar, pie, and number list charts: 
    • Group By:  choose how to differentiate sections of your chart. These can be any filter supported by RiskIQ.