Help
Glossary
Short explanations of the words used in datagab.
Terms
- Action
- A single step that does something in another tool, such as suspending a user. Actions live in the catalog.
- Approval
- A person saying yes or no to an action before it runs.
- Archive
- Long-term storage for logs that no longer need to be searchable every day.
- Attack path
- A chain of weaknesses that connects something exposed to something sensitive.
- Case
- A piece of work that groups related signals and findings, with an owner and a timeline.
- Connection
- Saved credentials datagab uses to read from or act on another tool.
- Datastore
- A small table that workflows can read and update.
- Detection rule
- A rule that watches logs and raises a signal when it matches.
- Emma
- The AI analyst built into datagab.
- Finding
- A problem found by a scanner, such as a risky cloud setting or a vulnerable library.
- Incident
- A confirmed problem that affects the business, with tasks, owners and reports.
- Index
- A set of logs that are searchable for a set time.
- Pipeline
- Processing that shapes logs before they are stored.
- Rehydrate
- Bringing archived logs back so they can be searched again.
- Session
- A longer task Emma works on in the background in Workplace.
- Signal
- An alert raised when a detection rule matches.
- Workflow
- A series of steps that runs when something happens.