Viewing incident details with a relationship graph

---
title: Viewing incident details with a relationship graph
description: Relationship graphs in the Security Incident Response workspace visually display the connections between a security incident and its related items to help you analyze the full context of a security incident.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/security-incident-response/sir-relationship-graph.html
release: brazil
product: Security Incident Response
classification: security-incident-response
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Working with Security Incident Records, Use, Security Incident Response Workspace, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Viewing incident details with a relationship graph

Relationship graphs in the Security Incident Response workspace visually display the connections between a security incident and its related items to help you analyze the full context of a security incident.

Items related to a security incident could include associated observables, configuration items \(CIs\), similar security incidents \(SIRs\), response tasks, and other related lists.

The following relationship graph example displays details for a security incident.

\[Omitted image "add-link-nodes-graph-sir.png"\] Alt text: Relationship graph for a SIR incident.

When you open a relationship graph for a security incident, the available configurations are visible by default. You can interact with the graph as follows:

-   Zoom into any object fit into the screen and drag the nodes.
-   Add subnodes for each node, if available, and view details of the subnodes.
-   Hide any node or subnode from the graph.
-   View details of a subnode.

-   **[Customize a relationship graph](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/security-incident-response/create-relationship-graph-config.md)**  
Visualize and analyze security incidents and their associated data in a relationship graph.
-   **[Create a relationship graph for an incident](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/security-incident-response/create-relationship-graph-sir.md)**  
Create a node relationship graph in Security Incident Response so you can better analyze a security incident by correlating it with malicious observables, configuration items \(CIs\), similar security incidents \(SIRs\), response tasks, and other related information.

**Parent Topic:**[Working with Security Incident Records](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/security-incident-response/using-analyst-workspace.md)

**Related topics**  


[Security Incident Overview section]()

[Security Incident Details section]()

[SIR Workspace Orchestration]()

[Security Incident Response Tasks]()

[Security Incident Response Other Records]()

[Security Incident Response Post Incident Review]()

[Update information in security incident related records]()

[TISC integration within SIR Workspace]()

[Reports in Security Incident Response]()

[Collaborate using conference call or chat in Security Incident Response]()

[MITRE attack and defend technique graph]()

[View and filter the incident timeline]()