Cases

Dashboard

Enclaves

Filter and Refine Panel

MITRE ATT&CK Framework

Main Screen

Marketplace

Navigation Bar

Searching

TruSTAR Community Chat

UI Tour (with Links)

Using Notes

Copying a Report

Emailing a Report

Exporting Report Data

Moving a Report

Redacting Data from a Report

Reports Basics

Reports Graph View

Reports List View

Reports Panel

Submitting a Report

Tagging a Report

Updating a Report

Deleting IOCs

Exporting IOCs

IOC Basics

IOC Graph View

IOC List View

Tagging IOCs

Threat Actors

Uploading IOCs

Whitelisting IOCs

Phishing Triage API

Phishing Triage Basics

Phishing Triage Python SDK

Phishing Workflow in the TruSTAR Web App

Using Phishing Triage with Orchestration Tools

Using Phishing Triage with SIEM Tools

Using Phishing Triage with a TAXII Client

Editing Your Profile

Notifications

User Settings

Managing Users

Managing the Company Whitelist

Managing the Redaction Library

Setting Up Multi-Factor Authentication (MFA)

Setting up a Service Account

Automated Sharing Between Enclaves

Correlations Between Enclaves

Deleting Reports from an Enclave

Domain-level URL Filtering

Exporting Indicators

Moving Data Between Enclaves

Uploading Data to an Enclave

ArcSight: Upload Events to TruSTAR

Azure Sentinel: Import Indicators from TruSTAR

Crowdstrike Falcon: Import Indicators from TruSTAR

Cybereason: Import Indicators from TruSTAR

MISP: Import Reports or Indicators from TruSTAR

Splunk Enterprise: Import Indicators from TruSTAR

Splunk Phantom: Enrich Notable Events

Okta (SSO)

Ping Identity (SSO)

AWS GuardDuty

Chrome Extension

Slack

Anomali ThreatStream

LogRhythm

Palo Alto MineMeld

TAXII Client Basics

TAXII FAQ

TruSTAR TAXII Server

Normalized Indicator Scores

Priority Event Scores

Priority Indicator Scores

API Usage Policy

Privacy Policy