Signal Watch

{{ lrLabel }}

{{ lrWarnText }}

Next {{ nextLabel }}

Loading

Today

{{ clockDay }} {{ rpChip }}

New {{ tNew }} Updated {{ tUpd }} Routed {{ tRouted }}

Hidden {{ tHidden }} Count only

PipelineToday · log

{{ f.label }} {{ f.n }}

New signals14 d

{{ cTrendFrom }}{{ cTrendTo }}

{{ lg.label }}{{ lg.n }}

GroupingAll runs

{{ cItems }}Items

{{ cSigs }}Signals {{ cRatio }}

{{ cs.label }} {{ cs.n }}

Open by ownerAct · Plan · Watch

{{ ow.name }}

{{ ow.n }}

None open

All clear

Signals

{{ sCount }}

Hidden {{ sHidden }}

No matches

Products

{{ prCount }} Local only

Product CPE Version Owner Model Open

{{ p.vendor }} {{ p.cpe }} {{ p.version }} {{ p.owner }} {{ p.modelLabel }} {{ p.openN }}

No matches

Sources

{{ soCount }} Config only

Source Role Kind Tier Schedule Last run Items On

{{ tg.t }}

{{ so.host }} {{ so.role }} {{ so.kind }} {{ so.tier }} {{ so.schedule }}

{{ so.stLabel }} {{ so.items }} · {{ so.noise }}

Workspaces

{{ rp.name }}{{ rp.when }}

Active

Decisions

{{ deCount }}

When Decision Signal Products Ref By

{{ dr.when }} {{ dr.label }} {{ dr.sig }}{{ dr.title }} {{ dr.prods }} {{ dr.refs }} {{ dr.by }}

None yet

Settings

Levels

SSVC-based

Open now

{{ ln.label }}{{ ln.n }}

EPSS min{{ v.epssTxt }} CVSS min{{ v.cvssTxt }} Act-by window{{ v.actBy }} d Info archive{{ v.archive }} d

{{ rc.label }}

{{ ru.id }}{{ ru.label }}

Grouping ladder

{{ ld.n }}

{{ ld.label }}{{ ld.rule }} {{ ld.tag }}

MinHash Jaccard{{ v.jacTxt }} Vendor window{{ v.win }} d Lookback{{ v.look }} d Embedding min{{ v.embTxt }} Grey zone{{ v.greyTxt }}

AI assist

Feature flag

GroupingSteps 4–5

ExtractionProducts only

Endpoint Model

{{ sf.label }}{{ sf.name }}{{ sf.status }}

{{ lk.k }}{{ lk.v }}

Scope rules

Model × type

{{ sh.label }}

{{ sr.label }}

Schedule

Time ZonePacific/Auckland

RunModeFetchedNewUpdatedHiddenRoutedTime

{{ sr.when }}{{ sr.mode }}{{ sr.fetched }}{{ sr.created }}{{ sr.updated }}{{ sr.hidden }}{{ sr.routed }}{{ sr.ms }}

Microsoft Sentinel

DCE endpoint DCR ID Stream · table{{ v.stream }} → {{ v.table }} Tenant ID Client ID

{{ sf.label }}{{ sf.name }}{{ sf.status }}

{{ sentTest }}

Idempotent · SignalId

Two-way{{ syncSent }}

Workspace resource ID

Out

{{ sm.a }}{{ sm.b }}

In

{{ sm.a }}{{ sm.b }}

{{ syncLast }}

{{ dc.n }}{{ dc.t }}

Analytics rule

{{ kql }}

Sample record

{{ sentJson }}

Ticket webhook

Per signal · product

System Base URL User

{{ sf.label }}{{ sf.name }}{{ sf.status }}

{{ ticketPath }} signal:product

{{ tickTest }}

Two-way{{ syncTick }}

Close value

Out

{{ sm.a }}{{ sm.b }}

In

{{ sm.a }}{{ sm.b }}

{{ syncLast }}

Template

{{ ticketTpl }}

Rendered

{{ ticketJson }}

Daily digest

Teams Workflows

Email

{{ sf.label }}{{ sf.name }}{{ sf.status }}

Email toEmail from

{{ sf.label }}{{ sf.name }}{{ sf.status }}

Send at

Preview

Signal Watch{{ dg.date }} Act {{ dg.act }}Plan {{ dg.plan }}Watch {{ dg.watch }}Hidden {{ dg.hidden }}

Data

{{ dt.k }}

{{ dv.t }}

Raw items{{ v.rawDays }} d

Rule tests

{{ testsSummary }}

Not run

{{ tg.g }}

{{ tr.id }}{{ tr.name }}{{ tr.detail }}

{{ d.lvLabel }} {{ d.id }}

Updated

{{ d.merged }}

AI review

{{ d.title }}

Source

{{ d.stLabel }}

Why

{{ ck.label }} {{ ck.id }} · {{ ck.lv }}{{ ck.valTxt }}

{{ cp.id }} {{ cp.label }}

{{ d.rawLabel }} → {{ d.lvLabel }}

Products

{{ pr.name }} {{ pr.hit }} {{ pr.version }}{{ pr.owner }}{{ pr.model }}

{{ pr.cond }}

{{ pr.ticket }}

{{ d.noProdLabel }}

Out of scope · {{ d.oos }}

Fields

{{ fd.k }}{{ fd.v }}

Fix{{ fx.text }} {{ fx.src }}

Sources{{ d.itemCount }}

{{ it.src }}{{ it.tier }}{{ it.when }}

Latest run

Sample

{{ it.title }}

{{ it.step }}

Review

{{ it.mergedFrom }}

AI extract

Routes

{{ d.routeLabel }}{{ d.routeInc }}

{{ d.incState }}

{{ d.routeAt }}

Sandbox{{ d.incNote }}

{{ tk.ref }}{{ tk.product }}

{{ tk.state }}

Sandbox{{ tk.note }}

None

SignalWatch_CL record

{{ d.json }}

History

{{ h.label }}{{ h.meta }} {{ h.when }}

{{ pf.title }}

Decoy

Name

{{ pf.errName }}

Vendor

CPELocal dictionary

{{ pf.errCpe }}

Version Owner

Management model

Shows

{{ sp.label }}

Signals

Import CSV

Drop CSV Choose file

Paste

{{ mp.h }}

Ready {{ im.ok }}Duplicate {{ im.dup }}Error {{ im.err }}

{{ ir.line }}{{ ir.name }}{{ ir.vendor }}{{ ir.model }}{{ ir.st }}{{ ir.errs }}

{{ sd.name }}

{{ sf.k }}{{ sf.v }}

{{ sd.url }}

{{ sd.testLabel }}

Fetching

Config

{{ sd.yaml }}

Stored items

{{ si.title }}{{ si.when }}

None

Add source

Name

{{ nf.errName }}

URL

{{ nf.errUrl }}

Kind Parser

Tier

Schedule

Flags

Stores

HeadlineLinkDateFields

{{ ts.label }}{{ ts.detail }}