Related context
The panel on finding, device, user and vulnerability pages that shows what other active modules know about the same record.
Updated
On this page
Detail pages have a Related context panel that brings in what other modules know about the record you're looking at, and the insights that name it. It only shows data from modules that are active for the customer, and it isn't shown at all when no module adds anything.
What each page shows
| Page | Related context |
|---|---|
| Finding | For an email or DNS finding: the domain's Microsoft 365 mail setup (the tenant that verified it, whether it's the default domain, how many mailboxes use it, or that it isn't a verified domain). For an exposed service: the enrolled devices connecting from that IP address. For a device finding: the device's ThreatLocker status |
| Device | ThreatLocker mode and last check-in; exposed services found on the device's public IP address |
| Microsoft 365 user | Enrolled devices matching the user's Entra devices, with their protection and pending updates; open alerts naming the user |
| Vulnerability | Protection on the affected devices (antivirus, ThreatLocker enforcing) and the updates that fix it (available, failed, installed) |
Each line links to its record or list.
How it stays accurate
- Nothing is fetched just for the panel. It uses data RevoSecure already has. For a Microsoft 365 user, devices are matched only from the user's devices already loaded on the page.
- Devices and computers are matched by name. ThreatLocker computers are matched to devices by short hostname within the same customer, as on the ThreatLocker pages.
- Customer boundaries hold. The panel only shows data from the same customer.
- MSP only. Customer-portal users don't see it.
See Posture pillars for the customer-wide picture.