IoC Hover Enrichment

Hover over an IoC such as an IP or domain to see instant TIDE data for the indicator.

Open

Only QRadar default IP address fields (i.e. Source IP, Destination IP) and custom fields with the following names can use this functionality. These are NOT case-sensitive.

1. destinationdnsdomain

2. destination dns domain

3. host

4. hostname

5. url

6. domain

7. domainname

8. domain name

9. dns query

10. dns response