filmov
tv
Anomali STAXX lookup observable
Показать описание
This is a short video walking through the typical use case of using threat intel to add context and meaning to something you have identified - searching STAXX for an observable.
The most common use cases for some sort of threat intel repository is to look up information and understand how bad something is. Often called observables or indicators, STAXX is a repository that you can use to search and look up and find out more about an IP, domain, URL, file hash or even email address.
This is a short video of the typical use case scenario and walkthrough of how you would normally do this and look at the relevant data that is presented.
The most common use cases for some sort of threat intel repository is to look up information and understand how bad something is. Often called observables or indicators, STAXX is a repository that you can use to search and look up and find out more about an IP, domain, URL, file hash or even email address.
This is a short video of the typical use case scenario and walkthrough of how you would normally do this and look at the relevant data that is presented.