Contents x
      Enriching an observable
      • 02 May 2023
      • 1 Minute to read
      • Print
      • Dark
        Light
      Contents

      Enriching an observable

      • Updated on 02 May 2023
      • 1 Minute to read
      • Print
      • Dark
        Light
      Article Summary

      Enriching an observable helps your security teams to understand a domain or IP's origin, function and risk level.

      Enriched data is spread out across numerous categories and sub-categories, with multiple enriched elements per category.

      Enrichment can be carried out in three ways.

      • From the search bar on the top right of the app:

      1. Enter a domain or IP in the search bar in the top navigation pane

      2. Click Enrich

      • In the Explore Indicator DNS Data menu:

      1. Navigate to Explore DNS Data > Explore Indicator DNS Data

      2. Specify a domain or IP

      3. Click Enrich

      • The Enrichment menu:

      1. Navigate to Enrichment > Enrichment

      2. Specify a domain or IP

      3. Click Enrich

      Was this article helpful?
      What's Next