An analyst should be able to upload or paste in plain text narratives, or delimited files like netflow queries. The application should identify domains, hashes, and ip addresses in the document and create a unique list. The application should query its own database as well as the CIF server for each of those indicators and return which ones were found.
veris-opensource
commented
12 years ago
An analyst should be able to upload or paste in plain text narratives, or delimited files like netflow queries. The application should identify domains, hashes, and ip addresses in the document and create a unique list. The application should query its own database as well as the CIF server for each of those indicators and return which ones were found.