Document toolboxDocument toolbox

Threat Insight Guide

The Threat Insight Guide provides an online reference available within the Infoblox Portal defining the common threat insight data classification groups and the specific properties for the groups. 

This is an online guide available within the Infoblox Portal under the Research menu on the Resource page (Infoblox Portal > Monitor > Research > Resources).

Viewing the Threat Insight Guide

To view the online Threat Insight Guide, perform the following:

  1. From the Infoblox Portal, click Monitor > Research > Resources. 
  2. On the Resources page within the Infoblox Portal, click Threat Insight Guide in the top menu.  The threat insight types along with a brief description  for each are provided. Threat insight types are as follows: 
    • TI-DNST

    • TI-DNSTN

    • TI-DNST

    • TI-DGA

    • TI-DGA

    • TI-BOTNET

    • TI-BOTNET

    • TI-BOTNET

    • TI-CONFIGURATIONISSUE

    • TI-CONFIGURATIONISSUE

    • TI-CONFIGURATIONISSUE

    • TI-CONFIGURATIONISSUE

    • TI-MAJTHREAT

    • TI-MAJTHREAT

    • TI-ZERODAYDNS

    • TI-ZERODAYDNS

    • TI-ZERODAYDNS

    • TI-SPEARPHISH

    • TI-SPEARPHISH


Image: The Threat Insight Guide page. 

3. On the Threat Insight Guide page, you can also perform the following: 

  • Click the search icon to conduct a search. Enter the value that you want to search for in the Search text box. The Infoblox Portal displays the list of records that match the keyword in the text box. The search panel includes information on recent searches; including tool information, console messages, and information on recent domain searches. 
  • Click the hourglass icon to view all running background tasks.