Phishing Triage Basics
Tools for automatically managing phishing emails
Station Features
UI Walkthrough
Cases
Dashboard
Filter and Refine Panel
MITRE ATT&CK Framework
Main Screen
Marketplace
Navigation Bar
Searching
TruSTAR Community Chat
TruSTAR Enclaves
UI Tour (with Links)
Using Notes
Reports
Copying a Report
Emailing a Report
Exporting Report Data
Moving a Report
Redacting Data from a Report
Reports Basics
Reports Graph View
Reports List View
Reports Panel
Submitting a Report
Tagging a Report
Updating a Report
IOCs
Deleting IOCs
Exporting IOCs
IOC Basics
IOC Graph View
IOC List View
Tagging IOCs
Threat Actors
Uploading IOCs
Whitelisting IOCs
Phishing Triage
Phishing Triage API
Phishing Triage Basics
Phishing Triage Python SDK
Phishing Workflow in the TruSTAR Web App
Using Phishing Triage with Orchestration Tools
Using Phishing Triage with SIEM Tools
Using Phishing Triage with a TAXII Client
User Settings
Admin Features
Scripted Extensions
Automated Sharing
Automatically Exporting Data
Enclave Data Submit/Export
Report Correlation Email
Sending ArcSight cases to TruSTAR
Application Integrations
Single Sign-On (SSO)
SIEM
Splunk Enterprise Security
TruSTAR App for Splunk ES FAQ
TruSTAR App for Splunk ES Install
TruSTAR App for Splunk ES User Guide
Splunk
IBM QRadar
Other
TAXII Applications
Anomali ThreatStream
LogRhythm
Palo Alto MineMeld
TAXII Client Basics
TAXII FAQ
TruSTAR TAXII Server
Orchestration
Case Management
Intelligence Source Integrations
Digital Risk/ATO
Endpoint
Cisco AMP Threat Grid
Cisco AMP Threat Grid Indicator Query
Crowdstrike Falcon Detect
Crowdstrike Falcon Intelligence
Crowdstrike Falcon Reports
Threat Intelligence
Dragos WorldView
FireEye iSight
IBM X-Force
IBM X-Force IRIS
Intel 471 Adversary Intelligence
Intel 471 Alerts
Intel 471 Malware Intelligence
Recorded Future Hash Intelligence
Recorded Future IP Intelligence
Recorded Future URL Intelligence
Recorded Future Vulnerability Intelligence
VirusTotal
Trusted Community
Other
Alienvault OTX Pulse
Cybersource
Facebook Threat Exchange
Farsight Security
Hybrid Analysis
Joe Sandbox
MISP
TAXII Client
Technical Info
Intel Feeds Source URLs
OSINT Sources Tech Specs
Premium Intel Sources Tech Specs
RSS Open Sources Tech Specs
COVID-19 OSINT Community Enclave
Intro to Intelligence Source Integrations
Technology
FAQs
TruSTAR Policies
Applications Integrations FAQ
Clearing browser cookies and caches
Contacting TruSTAR Support
Entity Extraction FAQ
Finding Your API Keys
IOC Uploading FAQ
Intelligence Sources FAQ
Login FAQ
Request to Archive Premium Intel Source
Security FAQ
What Entities Does TruSTAR Support?
What is the TruSTAR Community?
Product Release
