The Key Investigation area of SSH Hunter provides information that centers around host aspects of SSH key data that is collected by Sandfly.

Table View

The principle page offers search capabilities for various key fields and lists all discovered SSH keys in an easy to use table.

Clicking anywhere on a row of data, excluding the checkbox and action buttons, will open a page that contains additional details associated to that entry.

When one, or more, SSH Keys are selected by clicking on the checkbox, the Stash Key button becomes enabled. This button will uniquely add the selected key(s) to the Local Key Stash widget. A single key can also be quickly added by clicking on the Stash Key button in the Actions column.

The Local Key Stash, which is located in the bottom left area of the sidebar menu, is for having rapid access to open the Key Investigation page of important SSH keys.

Detail View

The nodes in the Explorer section can be expanded and the panel can be zoomed or moved around in order to follow the relationship between keys, users, and hosts.

The Key Data section provides easy to view textual data of an individual key.

Clicking on the Hosts or Users tabs will drill down into the associated data.