Release 4.2 (May 2024)
    • 16 May 2024
    • 1 Minute to read
    • Dark
      Light

    Release 4.2 (May 2024)

    • Dark
      Light

    Article summary

    Details

    ASN enrichment (All users)

    We've added the ability to enrich an ASN from the main search bar.

    Enriched ASN data is provided across the following categories:

    1. Basic information
    2. WHOIS RDAP data
    3. ASN reputation data, including takedown reputation and graphical representations of 30-day scoring metrics
    4. Active subnets, including each subnet's range, size, density and the number of active IPs

    IPv6 enrichment (All users)

    Users are now able to enrich an IPv6 address in the same way that an IPv4 address is enriched, albeit with a reduced dataset.

    Enriched IPv6 data is provided across the following categories, with pivot points provided for key pieces of data:

    1. Enrichment highlights, including risk and reputation scores
    2. Basic information
    3. DNS records
    4. Associated ASN information, including reputation and takedown scores

    IPv6 enrichment is accessed in the standard way, either using the top search bar or the main landing page.

    Users can also pivot to the IPv6 enrichment page from anywhere within the platform where IPv6 addresses are displayed.

    IOFA feeds (Enterprise only)

    • Data Marketplace > IOFA Feeds

    Feeds provided by Silent Push that contain Indicators of Future Attack (IOFAs) in the form of malicious domains, IPs and URLs have been separated out from vendor feeds located in Threat Intelligence Management > Feeds

    IOFA Feeds can also be expanded to provide users with a range of additional feed-specific metrics, including:

    1. Geographic data
    2. ASN count
    3. Historical IOFA count
    4. TLD and ASN distribution
    5. Featured registrars and nameservers

    IOFA Feeds deal with a range of specific threat actors, C2 infrastructure, threat campaigns and attack vectors, and are included in each TLP Amber report, published within the Enterprise platform.

    Takedown service (Enterprise only)

    • Digital Threat Management > Brand Impersonation > Takedown Service

    Silent Push now offers a takedown service for a limited number of Enterprise accounts.

    Users are able to add domains to a takedown list, and monitor submissions via a status table that includes associated information about each domain.

    Resource Center (All users)

    We've added a Resource Center widget into the Community and Enterprise platform that acts as a knowledge repository and user education console.


    Was this article helpful?