Dataflows Overview

A dataflow is Cyberhaven's representation of observed data handling, starting with the data's origin and following its subsequent movement between various people, devices, websites, applications, email attachments, and other mediums. This approach provides a clear narrative of a file's journey, even when it is copied, compressed, or renamed.

Cyberhaven enables incident investigation by offering two distinct views of a dataflow: Simplified Lineage View and Legacy Lineage View. These views can be toggled when reviewing event details in the Events tab of Risks Overview.

The following pages in this section explain the telemetry that the Cyberhaven platform records to create dataflows from the accumulation of events and how this builds lineage to allow us to accurately.