Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The Metadata report displays content sourced from the web on a threat indicator.  All listed reports are unfiltered and provide an overall perspective on the nature of the indicator. The meta data provided includes the following characteristics:

  • TITLE: The title or subject matter for the listed report.

  • SNIPPET: A brief snippet or description of the subject matter and scope of the listed report. 

  • LINK: The URL link to the source of the listed report.

The Dossier Metadata page also contains the following features:

Search Field

The search field is located at the top of the page and is used to search for threat indicators. You can run a search based on domain name, IP address, hostname, URL, email, or hash value. 

...

  • Dossier & TIDE Quick Start Guide
  • Dossier API Calls Reference
  • Dossier Source Descriptions
  • Dossier User Guide
  • Threat Classification Guide

Task Navigation Menu

Click on one of the icons to perform a task.

Image Added
Image: The navigation menu. 

You can do the following, by clicking on the appropriate icon:

Reload Page

Click Image RemovedClick the reload icon to reload the Timeline Report page. 

Add to Custom List 

To add a domain or IP address, complete the following:

  1. On the Dossier Timeline report page, click Image Removedclick the Add to Custom list icon located at the top, right-hand side of the Action bar.
  2. On the Add to Custom List page, select what custom list or lists from among the list of available custom lists to add the domain or IP address by clicking the blue arrowthe right-pointing arrow Image Removedicon associated with the custom list. If you cannot locate the custom list you want to add the domain or IP address to, you can use the search feature to search for the custom list. Alternatively, you can clickImage Removedclickthe double, right-pointing arrows icon to add the domain or IP address to all custom lists. If you inadvertently add the domain or IP address, in the Selected column of custom lists, you can click the blue arrow associated with the custom list to remove the domain or IP address from it.
  3. Once you have added the domain or IP address to your custom list or lists, you can save your configuration by clicking Add.
  4. You should now see the name of the custom list or lists where the domain or IP address has been added populating the Custom Lists section of the Timeline report page.

For information on custom lists, see Creating Custom Lists.  

Generate API Request

Click Image Removed to the generate API icon to generate an API request. A pop-up window populated with the API information will be displayed.

The Generate API Request window.Image Modified
Image: The Generate API Request window. 

Copy the information from the pop-up window. Click Full API Guide to view the Swagger Dossier API documentation. Click Close to close the window.

Feedback on Results


Click Image Removed to Click Image Removed to Click the load webform icon to load a webform where you can provide comments and feedback on results you obtained from Dossier. For details, see Dossier Threat Research Feedback.

Export

Image: The Feedback on Results pane. 

Export

Click the Export Dossier Report icon to export the Dossier Report file. You can choose to include any or all of the report sections by placing a check in the box associated with a specific section of the report. You can choose from among the following sections:

...

You can also do the following on the page: 

  • Background TasksClick Image RemovedClick the hourglass icon to open the side panel to view a list of all running background tasks. 

  • Global Search: Click Image Removed the search icon in the Search text box, then enter your search criterion. Alternatively, select the criterion if it appears under Recent Searches, which shows tool information, console messages, and other information used in recent searches. The Cloud Services The Infoblox Portal will show all records that match the search criterion. 

...