Platform

Featured Integrations

Reduce risk and mitigate cyber attacks, no matter your IT & security stack, maturity journey, or industry

See our Threat Intelligence Solutions in Action

Outcomes

Threat Intelligence solves pervasive challenges

Reduce operational risk through timely, precise, and actionable intelligence.

See Recorded Future’s Intelligence in Action

Products

Services

Research

Minimize operational risks with our timely, precise, and actionable intelligence.

See Recorded Future in Action

Resource Center

Additional Resources

Additional Topics

Resources

Why Recorded Future

About Us

Partner With Us

Join Us

Company

brand-logo-long-black.svg

Rectangular Logo - Digital (RGB).svg

Blog

Careers at Recorded Future

Contact Us

Enrichment Dashboards

The enrichment dashboards in Splunk provide concise summary of information Recorded
 Future has collected and analyzed on the selected entity (IP address, domain,
 hash, etc.), which can be entered manually in the upper left of the dashboard
 OR via a workflow action from another Splunk dashboard (see this
 <a href="https://support.recordedfuture.com/hc/en-us/articles/115004027533-Pivoting-to-Recorded-Future-Enrichment-Data-in-Splunk">support page</a>
 for setting up workflow actions).


 The top of the enrichment dashboards show a quick summary of risk information,
 including Recorded Future's risk score and risk rules.&nbsp; More information
 about risk scoring in Recorded Future is available in several support pages found
 <a href="https://support.recordedfuture.com/hc/en-us/sections/115000247548-Risk-Scoring">here</a>.

<img src="https://cms.recordedfuture.com/uploads/enrichment_dashboards_01_b1a8b7e533.png" alt="enrichment-dashboards-01.png" />



 Immediately below the risk section is some additional information that is typically
 entity-dependent.&nbsp; For example, the cyber vulnerability enrichment dashboard
 includes a summary of NVD information.&nbsp; Also, if there are any research
 notes from Recorded Future's Insikt group, they would appear in this section.&nbsp;
 Below those sections, a timeline of references is included (as a horizontal bar
 chart).

<img src="https://cms.recordedfuture.com/uploads/enrichment_dashboards_02_d54a90e73c.png" alt="enrichment-dashboards-02.png" />



 For context, we show co-occurring entities as 'related entities' in the sections
 below the timeline.&nbsp; These related entities are attackers, malware, other
 IOCs, etc., that appear in references alongside the entity we are getting enrichment
 for (the IP address&nbsp;184.168.221.96 in this example).

<img src="https://cms.recordedfuture.com/uploads/enrichment_dashboards_03_ee435f8964.png" alt="enrichment-dashboards-03.png" />

<img src="https://cms.recordedfuture.com/uploads/enrichment_dashboards_04_2a33347ba8.png" alt="enrichment-dashboards-04.png" />



 Finally, we include some representative references that include a mention of
 the entity being enriched.
 <img src="https://cms.recordedfuture.com/uploads/enrichment_dashboards_05_e560ff43a9.png" alt="enrichment-dashboards-05.png" />

<img src="https://cms.recordedfuture.com/uploads/enrichment_dashboards_06_606ccfd532.png" alt="enrichment-dashboards-06.png" />



 For those familiar with the Recorded Future web-based portal, these enrichment
 pages are designed to mimic the
 <a href="https://support.recordedfuture.com/hc/en-us/sections/115000237407">Intelligence Cards</a>
 available through our portal.

Refine your search

We could not find any results for your search, so why not start with the articles listed below?

강화 대시보드