The Platform

The vocabulary Stairwell uses for its own moving parts: environments, assets, objects, sightings, verdicts, prevalence, and the judgments your team records.

The words in this section are Stairwell's own. They describe how the platform is organized and what it records, and every other page on this site assumes them.

Read Environments, Assets, Objects and Sightings first, in that order. They are the four nouns everything else is built from: who can see what, which machine, which file, and the record that ties a file to a machine at a moment.

Then Verdicts and Prevalence, which are the two signals you weigh on almost every file, and What Is an Opinion?, which is how your team's own judgment overrides the automated one.

Variants covers files that resemble each other, What Is a Threat Report? the packaged research Stairwell matches against your environment, and Hostnames and IP Addresses the infrastructure entities that come out of files and carry a history of their own.


Did this page help you?