Scoped Subgraphs
Scoped subgraphs are bounded network graph structures derived from larger stakeholder graph views and filtered to specific organizational or security contexts. Generated by the Cortex-side network graph job, they constrain the broader network to include only nodes and edges relevant to particular use cases, ensuring that graph analysis remains operationally focused and contextually appropriate.
Generation and Scoring
The network graph job processes scoped subgraphs by scoring both nodes and edges within each bounded context. This scoring mechanism evaluates the significance and relevance of entities and their relationships, providing quantitative measures for downstream analysis. The scored subgraphs feed into signal generation pipelines that power security and business intelligence workflows.
Signal Emission
Scoped subgraphs serve as the foundation for emitting warm-intro and shared-al signals. The warm-intro signal identifies potential introductions or connections within a constrained network scope, while shared-al signals surface common attributes or relationships between entities. These signals derive their precision from the targeted nature of scoped subgraphs, which reduces noise compared to analysis performed on unconstrained graph data.