Enriching an observable
    • 02 May 2023
    • 1 Minute to read
    • Dark
      Light

    Enriching an observable

    • Dark
      Light

    Article Summary

    Enriching an observable helps your security teams to understand a domain or IP's origin, function and risk level.

    Enriched data is spread out across numerous categories and sub-categories, with multiple enriched elements per category.

    Enrichment can be carried out in three ways.

    • From the search bar on the top right of the app:
    1. Enter a domain or IP in the search bar in the top navigation pane

    2. Click Enrich

    • In the Explore Indicator DNS Data menu:
    1. Navigate to Explore DNS Data > Explore Indicator DNS Data

    2. Specify a domain or IP

    3. Click Enrich

    • The Enrichment menu:
    1. Navigate to Enrichment > Enrichment

    2. Specify a domain or IP

    3. Click Enrich


    Was this article helpful?

    ESC

    Eddy, a super-smart generative AI, opening up ways to have tailored queries and responses