Scoped Subgraphs
Scoped subgraphs are bounded structures derived from the broader network graph, filtered to specific organizational or security contexts. Generated by the Cortex-side network graph job, they constrain the full graph to include only nodes and edges relevant to particular use cases. This filtering ensures that graph analysis remains operationally focused and contextually appropriate for downstream processes.
The generation process involves scoring nodes and edges to determine their relevance within the defined scope. By evaluating these metrics, the system identifies which components of the network graph should be included in the scoped subgraph, effectively narrowing the data set to actionable insights.
These scoped structures serve as the foundation for emitting specific signals, including warm-intro and shared-al indicators. By isolating relevant network segments, the system enables more precise signal generation that aligns with the operational needs of the target scenario.