External Threat Feeds Page
You can use the External Threat Feeds report page to view:
-
Top ETF sources used to detect threats in messages in graphical format
-
Summary of ETF sources used to detect threats in messages in tabular format.
-
Top IOCs that matched threats detected in messages in graphical format.
-
Top ETF sources used to filter malicious incoming mail connections in graphical format.
-
Summary of ETF sources used to filter malicious incoming mail connections in tabular format.
In the ‘Summary of External Threat Feed Sources’ section:
-
You can click on the number of messages for a particular ETF source to view the related messages in Message Tracking.
-
You can click on a particular threat feed source to view the distribution of the ETF source based on the IOCs.
In the ‘Summary of Indicator of Compromise (IOC) Matches’ section:
-
You can click on the number of IOCs for a particular ETF source to view the related messages in Message Tracking.
-
You can click on a particular IOC to view the distribution of the IOC based on the ETF sources.