Infoblox Dossier™ uses highly accurate machine-readable threat intelligence data via a flexible Threat Intelligence Data Exchange (TIDE) to aggregate, curate, and enable distribution of data across a broad range of infrastructures. TIDE enables organizations to ease consumption of threat intelligence from various internal and external sources, and to effectively defend against and quickly respond to cyberthreats. TIDE is backed by the Infoblox threat intelligence team that normalizes and refines high-quality threat intelligence data feeds.
Dossier has powerful REST API. The API allows to access indicators of compromise in TIDE database in formats like json, xml, stix, cef, cvs, etc. This allows easily do integrations with other solutions without additional transformation/mediation layers. SIEM, NGFW, SWG are good examples where the indicators can be applied to improve overall security in an organization.
Dossier is a threat indicator research tool that gives contextual information from a dozen sources (including TIDE) simultaneously, empowering users to make accurate decisions quicker and with greater confidence. For customers having access to AIS Commercial threat indicators, Dossier will be automatically enabled and search against this data set. AIS data is available via simple searches on specific data types such as IPs and Hostnames using Dossier. Dossier provides additional context from other sources on known AIS indicators and can provide useful context for response action when you have an RPZ hit on an indicator sourced from AIS.
Dossier Benefits
Dossier improves the speed, quality and accuracy of threat research, investigation and response efforts by as much as 67 percent.
Dossier empowers quicker and immediately actionable decisions with greater confidence.
Seventy-four percent of security and risk leaders complain that the average threat investigation takes over four hours.
Sixty-four percent of practitioners say security investigation is resource intensive.
Dossier Guides for the Infoblox Portal
Click on a hyperlink to view a Dossier guide.
Infoblox Quick Start Guide for Dossier and TIDE
Infoblox Dossier API Services Reference
Dossier Data Provider Services API Reference
Additional Sources of Information About Dossier
For additional information on Dossier, see the following documentation:
- Dossier User Guide
- Dossier Threat Indicator Report
- Dossier Source Descriptions
- Managing External Licenses
- Dossier Usage Reports
- Dossier API Guides