NetWitness Visualize
Left Mouse Drag Moves any visible timeline and session images along with the mouse.
Left Mouse Click Zoom in on the current view around the location the mouse was clicked.
Shift Key + Left Mouse Click Zoom out from current view around the location the mouse was clicked.
Ctrl Key + Left Mouse Click Zoom into the clicked session and center the viewer on that session.
Mouse Wheel Up Zoom in on the current view around the location the mouse was clicked.
Mouse Wheel Down Zoom out from current view around the location the mouse was clicked.
View visible sessions in a grid layout.
View visible sessions in a timeline layout.
Shows the meta filter that has been applied to the current view. To remove the filter, click the text.
Shows the time filter that has been applied to the current view. To remove the filter, click the text.
Zoom in on the current view around the location the mouse was clicked.
Zoom out from current view around the location the mouse was clicked.
Open the viewer in fullscreen mode (NOTE: When the viewer is in fullscreen, the mousewheel may not fire on some operating systems other than Microsoft Windows.
Toggles navigation controls from always being visible to being visible only when the user mouses over the left side of the viewer.
Removes any active filters and resets the viewer to the default view.
Viewer will automatically begin iterating through each visible session.
Pauses animation.
Focus viewer on previous session in the animation queue.
Focus viewer on next session in the animation queue.
Meta Drills
Only displays sessions that have also been tagged with the meta value that has been clicked. In this example, if "application/pdf" is clicked, only sessions that have been tagged with content-type "application/pdf" are displayed in the current view.
Time Drill
Only displays sessions that have been time stamped in the clicked time range. In this example, all sessions that existed on July 8th are displayed.
Session Information
When the user has zoomed into an image, the details of the network session where the image was found is displayed. Each meta item in this list can be clicked so that only sessions that have also been tagged with the meta value are displayed.