FileSum

Page Layout

At the top of the page is the search bar. This allows the user to input a file's MD5 file hash and retrieve summary data for that file.

Beneath this is a history chart. This chart displays the data for the file over a 5 week period. To the right is a calendar; each day that had activity corresponding to this IP address will have a color indicating the amount of traffic. Clicking on a date will take the user to the flow page with search parameters for the file with a time range set for the date clicked.

Below the summary data is a table containing every instance of the file. This displays detailed data on each of the instances including the following fields:

  • Date

  • Destination

  • Countries

  • Source

  • Systems

  • Top hosts