Infrastructure Hub
Purpose
Infrastructure Hub is the staging area for imported infrastructure data, especially Nmap XML results that you do not want to dump directly into the graph.
Use it to review hosts and services first, then push only meaningful items into the Workspace.
Typical Flow
- Import an Nmap XML file.
- Review hosts, ports, services, products, versions, and scripts in Infrastructure Hub.
- Filter by host, service name, state, or graph link status.
- Select individual services or send the filtered subset.
- Push relevant items to the graph and continue triage in Workspace.
Toolbar Filters
The toolbar includes:
- search across host, port, service, OS, and metadata
- service-name filter
- state filter (
open,closed,filtered, or all states) Unlinked only, which shows services that are not linked to graph nodes yet
Unlinked only is useful after repeated imports: it helps you focus on newly discovered services instead of re-sending nodes that already exist in the graph.
Why Use Staging
The hub review flow helps when you need to:
- reduce graph noise
- deduplicate repeated scan data
- avoid adding every open port as a node
- separate raw scan inventory from analyst-confirmed paths
- decide which services deserve Findings, Evidence, or Arsenal follow-up
Good Candidates For This Panel
- large initial scans
- multi-host labs
- internal network pivots
- repeated rescans after new access
- broad service inventories that need analyst filtering