Build and explore relationship graphs

Create a graph from a case

You can also open Entity correlation from navigation, select New Graph, enter a name, and select Create. Add to graph actions on supported result and evidence screens let you choose an existing graph or create a new one. Some findings contain no importable entities; Nexus reports this instead of adding empty nodes.

1. 1Open your case. On desktop, expand Entity graph below the case tools; on mobile, use the Graph tab in the case workspace.
2. 2If the case has no graph, select Create Graph for this Case.
3. 3Select Import Findings to add the importable entities and relationships from the case’s saved findings. The button shows the findings count and is disabled when there are none.
4. 4Use Open Full View to continue in Entity Correlation.

Inspect and arrange the graph

• Use Zoom In, Zoom Out, and Fit View to inspect the canvas. Drag entities to adjust their positions.
• Open Change Layout for Force-Directed, Hierarchical, Circular, or Grid arrangements.
• Select an entity to inspect its value, available metadata, tags, rating, and investigator notes. Select a connection to inspect its source, target, relationship type, and notes.
• Creating a connection opens Choose Relationship Type. Select the relationship that your evidence supports; examples include Associated With, Owned By, Resolves To, and Referenced In.
• Use Ctrl/Cmd-click or drag a selection box to select multiple entities, then use Merge or Delete. Read their confirmation dialogs before proceeding. Undo and Redo are available for supported graph changes when their controls are enabled.

Import a domain and its resolved IP address from saved findings. Inspect the source fields before treating the connection as evidence, and add an investigator note if the relationship needs further verification.

Manage graphs and export them

Your Graphs lists saved graphs. Use Rename graph to change a title. An unlinked graph offers Link to case file; choose an available case. Cases that already have a graph are excluded from that destination list. A linked graph shows its case name.

Export Graph downloads graph data as JSON. To include a graph image in a report, use the case’s Export PDF workflow and include Entity Graph (landscape image). These are different output formats.

Graph access depends on your plan. A drawn or imported connection expresses a relationship in your working analysis; its presence alone does not confirm identity, ownership, or wrongdoing. Review the supporting records and keep uncertain associations clearly documented.