VEIL / restricted workspace
Turn observations
into understanding.
Explore sensor activity, investigate signals, and manage collection from one secure workspace.
Invitation onlyAuthenticator requiredRole-based access
Collection intelligence
Activity overview
Waiting for first refresh…
Sensor—
Profile—
Effective stateUnknown
EdgeUnknown
Campaign expiry · UTC—
Activity over time
24 intervals · selected sampleRequest distribution
Analytics use a bounded, newest-first sample of sanitized events.
Requested surface
Top request paths
Waiting for data
Detection
Matched signals
Waiting for data
Event explorer
Waiting for eventsRecent observations
Filters apply to the latest 200 loaded events, not the full archive. Select a request to inspect its sanitized metadata.
| Observed · UTC | Source | Request | Severity | Signals | Bytes |
|---|
Audited operations
Collection controls
Reading collection state…
Pause stops new evidence capture after a short propagation interval. Resume cannot override campaign expiry or an emergency shutdown.
Profiles, network access, expiry extensions, and deployment configuration remain reviewed infrastructure changes.
Workspace administration
Invitations expire after 3 daysPeople and access
Viewer: aggregate analytics. Analyst: sanitized event investigation. Operator: collection controls. Each role receives only its stated capabilities.
| User | Status | Roles |
|---|
Admin creation and account disablement require a trusted AWS operator. Disabling an account does not instantly invalidate already-issued JWTs.