Investigate a Threat
Copy link

When you select an alert, you can use the Threat Investigations feature on the threat. This option is available only to users who are subscribed to Threat Intelligence (Intelligence Hub) and only for phishing and mobile application threats. For more information, see Threat Investigations .

To investigate a threat:

  1. Go to Findings > Digital Risk Protection > Threats
  2. Click the investigation icon displayed at the top right of the threat header. The domain investigation is displayed in the Intelligence > Threat Intelligence > Threat Investigations page.
ℹ️

Investiate indicators directly in a threat

If a threat includes an indicator of compromise (IOC), you can hover over it to open a popover with investigation options.