Entities Supported
The TruSTAR platform supports the following entities that are IOCs:
- IPV4
- IPV6
- CIDR BLOCK
- URL (Domains are currently categorized as URL's)
- MD5
- SHA1
- SHA256
- BITCOIN ADDRESSES
- SOFTWARE (file names are currently treated as Software)
- EMAIL ADDRESS
- REGISTRY KEY
- PHONE NUMBERS
TruSTAR supports these other types of entities:
- CVE (based on NIST's CVE standard)
- MALWARE
- THREAT ACTOR
The platform can automatically extract strings that conform to the entity types listed above and correlate using them.
