This topic lists the resources available for conducting research into indicators. To access the tools, in the Infoblox Portal go to Monitor > Research > Resources. Default TTLs, Infoblox InfoRanks, Excluded Bogons, Threat Classification Guide, and the Threat Lab reports are available for the BloxOne Infoblox Threat Defense Advanced package.
...
The Infoblox InfoRanks list ranks the top second-level domains by popularity. The list is updated regularly. For details information, see Infoblox InfoRanks.
...
The default TTL (time-to-live) list displays each threat class’s default TTL value in a threat feed. TTL values range from less than one day to a year, depending on the indicator’s type. For more information about the TTL for threat indicators in a feed, see Default TTLs.
...
A bogon is an internet address prefix that should never appear in a table for routing IP addresses. The Excluded Bogon page allows administrators to view invalid IP ranges that can be used by malicious entities. For details information, see Excluded Bogons.
Threat Classification Guide
The guide defines (1) the common data-classification groups used in threat intelligence and (2) the properties of each group. For details information, see Threat Classification Guide.
...
Threat Insight Guide
The guide lists threat insight indicators along with a brief description for each indicator. For details information, see Threat Insight Guide.
...
Threat
...
Actor Naming Conventions
Infoblox Threat Lab reports provide the latest analysis, alerts, advisories, and other reports from the Infoblox Threat Intelligence Unit. For details, see Infoblox Threat Lab ReportIntel documents why and how threat actors are given names. For information, see Threat Actor Naming Conventions.
.