View Investigation Additional Enrichment Data
If the selected indicator is an IOC, you can see additional Threat Command enrichment data in the following tabs (shown only if they are relevant):
- Related File Hashes - Shows the file hashes related to the IOC.
- WHOIS - Shows the WHOIS information.
- CPEs - Shows information about the CPEs affected by the CVE.
- Resolutions - Shows information for resolved IP addresss or domains.
- DNS - Shows information about the DNS entries.
- Subdomains - Shows additional subdomains.
- Web Components - Show shte web components related to the IOC.
On most of these tabs, you can download the information to a CSV file with the Export all link.
Did this page help you?