Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The Dossier Summary report provides a comprehensive overview of threat indicator information, including DNS records, domain/subdomain count, URL count, and IP count.

...

For information on the threat classes and properties reported, see the Infoblox Threat Classification Guide located at Cloud Services Infoblox Platform > MonitorResearch > Resources Classification Guide. To view the full guide without logging into the Cloud Services Infoblox Portal, see Infoblox Threat Classification Guide

...

  • Web Category: The web category the indicator is a member.
  • Info: Information about the threat indicator. 
  • TLD Score: The risk score for the TLD calculated from the TLD's confidence, rarity, and popularity scores.  
  • Nameserver Reputation: Displays information on the domains associated with the nameserver, along with information on the nameserver's confidence, rarity, and popularity. The reputation of the nameserver is established based on the nameserver's confidence, rarity, and popularity scores. 
  • DNS Ranking: The DNS ranking as determined by Infoblox. Information on its query rank is also provided.
  • Threat Property: The threat property associated with the indicator. Information on its query rank is also provided.
  • Industry DNS Rank: A consensus rank determined by the aggragate of rankings provided by industry sources. Information on its query rank is also provided.

Dossier Search:  Copy or paste your indicator search parameters into the search field followed by clicking Search to initiate an indicator search. The Dossier search feature accomodates searches for domains, IP addresses, hostnames, URLs, email, or hash value.

call-out D

Task Navigation Menu: Click on one of the icons to perform a task.


Image: The task navigation menu. 

...

When available, the top navigation bar also displays a clickable link where you can find additional information on the indicator.  

call-out EImage Modified

Dossier Search:  Copy or paste your indicator search parameters into the search field followed by clicking Search to initiate an indicator search. The Dossier search feature accomodates searches for domains, IP addresses, hostnames, URLs, email, or hash value. 

call-out F

Resources: Click Resources and select an option from the drop-down menu to view a Dossier resource.

...

  • Background TasksClick the hourglass icon to open the side panel to view a list of all running background tasks. 

  • Global Search: Click the search icon in the Search text box, then enter your search criterion. Alternatively, select the criterion if it appears under Recent Searches, which shows tool information, console messages, and other information used in recent searches. The Cloud Services The Infoblox Portal will show all records that match the search criterion. 

...