Observables Supported

Updated 2 months ago by Shimon Modi

TruSTAR platform supports processing of the following IOC types:

  • IPV4
  • IPV6
  • CIDR BLOCK
  • URL (Domains are currently categorized as URL's)
  • MD5
  • SHA1
  • SHA256
  • CVE (based on NIST's CVE standard)
  • BITCOIN ADDRESSES
  • SOFTWARE (file names are currently treated as Software)
  • EMAIL ADDRESS
  • REGISTRY KEY
  • MALWARE
  • THREAT ACTOR
  • PHONE NUMBERS

The platform can automatically extract strings that conform to the entity types listed above and correlate using them.

How Did We Do?