...
You can configure Insight notifications to be viewed in the Infoblox Portal (in-application), and/or have notifications sent to an email recipient address of your choice in the Infoblox Portal, Insight notifications can be viewed on the notifications page in the Infoblox Portal.
| Infoblox Threat Defense - Insight Alert Update One or more domains have been added to this Insight Outlier.
| |
|---|---|
| Fields | Availability |
| Threat Type: <Major Attack> | IN-APPLICATION, EMAIL |
| Threat Class(s): <TI-MAJTHREAT> | IN-APPLICATION, EMAIL |
| Most recent event: <2023-06-27 08:38:10 +0000 UTC> | IN-APPLICATION, EMAIL |
| Threat Level: <high> | IN-APPLICATION, EMAIL |
| Ckick the link to go to the SOC Insights dashboard | IN-APPLICATION only |
...
Go to the Insight Reporting Dashboard for details.
Image: A sample In-App Insight notification.
...
| Domain Notifications | |
|---|---|
| Fields | Description |
| Detection Class | The detection class of the domain triggering the detection |
| Detection Family | The detection family of the domain triggering the detection |
| Threat Indicator | The lookalike domain which triggered the detection |
| Target | The original domain |
Image: A sample In-App Domain notification.
Sample email notification (Domain)
Image: A sample, system-generated email notification.