Enriching an observable
- 02 May 2023
- 1 Minute to read
- Print
- DarkLight
Enriching an observable
- Updated on 02 May 2023
- 1 Minute to read
- Print
- DarkLight
Article Summary
Share feedback
Thanks for sharing your feedback!
Enriching an observable helps your security teams to understand a domain or IP's origin, function and risk level.
Enriched data is spread out across numerous categories and sub-categories, with multiple enriched elements per category.
Enrichment can be carried out in three ways.
- From the search bar on the top right of the app:
Enter a domain or IP in the search bar in the top navigation pane
Click
Enrich
- In the
Explore Indicator DNS Data
menu:
Navigate to
Explore DNS Data > Explore Indicator DNS Data
Specify a domain or IP
Click
Enrich
- The
Enrichment
menu:
Navigate to
Enrichment > Enrichment
Specify a domain or IP
Click
Enrich
Was this article helpful?