Best Practices: Indicator Threat and Confidence Ratings

Indicator Status

Case Attributes

The Source Attribute

The Description Attribute

Attributes

False Positives Overview

Enriching Data With Tags From the MITRE ATT&CK Source

Pivoting on Enrichment Services

RiskIQ Enrichment

DomainTools Enrichment

urlscan.io Enrichment

VirusTotal Enrichment

Enrichment Overview

Applying Security Labels

ATT&CK Tags

Farsight Security Passive DNS Enrichment

Shodan Enrichment

The Enrichment Tab

Applying Tags