868 B
Co-Occurrence allows you to find requests that happen often at the same time as the selected domain. Hence it will give you a hint what Apps might be involved in the activity.
How do you interpret these results? Lets look at an example:
The domain example.org had 14 requests with an average time divergence of 0.71 seconds. That is, these 14 domain calls happend, on average, less then a second before or after the original request of the selected domain.
Close temporal proximity and high occurrence counts are both indicators for domain correlation. Results are sorted by a ranking index (9.) which strikes a balance between the two. Preferring entries with higher counts as well as low time divergence.
Tip: As a visual guide you can look for the colored bar beside each value. The larger the bar, the greater the correlation.