Overview: Intelligence Reports
Updated 4 months ago
by
TruSTAR
A TruSTAR Intelligence Report is a body of structured and/or unstructured data that is uploaded to TruSTAR, where it is stored in a specific enclave. Any Indicators in the report are extracted and enriched with information from internal and external intelligence sources.
Viewing Reports
The Reports panel is where you work with reports in the TruSTAR Web App. You access the reports panel by clicking the Reports icon in the Navigation Bar.
The Reports panel has two views, each with a separate purpose:
- List View: Displays a list of reports that match the current filters you have set. This is the default view for reports. You can always return to the list by clicking on the Reports icon in the Navigation Bar.
- Graph View: Provides a detailed look at a selected report. To see a report in Graph view, click on the highlighted title of the Indicator in List View.
Submitting Reports
There are four ways to get started with adding data to your enclaves:
- Enclave Inbox: Forward suspicious emails to TruSTAR to get added enrichment.
- Google Chrome Extension: Query or submit suspicious Observables to TruSTAR.
- Slack App: Instantly query intelligence sources and submit data to TruSTAR.
- Manual Ingest: Submit any file formal directly in TruSTAR Station.
Managing Reports
The following topics explain how to work with reports in the TruSTAR Web App:
- Filtering Reports
- Updating a Report
- Deleting a Report
- Tagging a Report
- Moving a Report
- Copying a Report (with and without redaction)
- Exporting a Report
