Skip to content

The 3D Graph

TFD-42 edited this page Aug 13, 2026 · 1 revision

The 3D Graph

Self-contained HTML file (embedded CSS/JS) rendered with three.js / 3d-force-graph. Drag to orbit, wheel to zoom, click a node for details. Requires an internet connection at opening time only, to load the rendering library from a CDN.

Display modes

Five modes, selectable at the top of the screen (or with keys 15):

  • Type — colors each process by AI-detected category (browser, system service, dev-tool, database, network).
  • Security (default) — colors by final risk level; the panel lists the rule-based level, the AI opinion if any, a "diverging opinions" badge on disagreement, external connections, and incomplete-collection fields.
  • Debug — CPU+RAM heat gradient; raw technical fields (PID, executable, command line, connections).
  • Verbose info — full dump of every known field of the selected item.
  • Knowledge — educational explanation of the process's role (Ollama if enriched, otherwise a built-in knowledge base of common system processes).

Legend and filters

The legend is clickable: hide/show whole categories (risk levels, process types, protocols). The "Display" section contains "Low-activity processes", hidden by default — a process with low graph degree, low CPU+RAM and low final risk is hidden at load time to keep the graph readable. A process whose risk is not "low" is never auto-hidden, regardless of activity. The search field highlights matching nodes.

Keyboard and camera

Action Button Keyboard
Zoom in + Ctrl + +
Zoom out Ctrl + -
Recenter R or Ctrl + R
Close panel Esc
Focus search /
Switch mode top buttons 1 to 5

Copy buttons

The detail panel offers one-click copy buttons: PID, executable path, full command line, a ready-to-paste kill <pid> command, and the SHA256 fingerprint when --check-integrity was used. The kill command is only copied to the clipboard, never executed by the page.

Link colors

Links are colored by relationship type — parent → child, shared file, and network protocol (TCP / UDP / UNIX sockets). All colors were validated to remain distinguishable under color-vision deficiency as well as normal vision.

Clone this wiki locally