Station Features
UI Walkthrough
Cases
Dashboard
Filter and Refine Panel
MITRE ATT&CK Framework
Main Screen
Marketplace
Navigation Bar
Searching
TruSTAR Community Chat
TruSTAR Enclaves
UI Tour (with Links)
Using Notes
Reports
Copying a Report
Emailing a Report
Exporting Report Data
Moving a Report
Redacting Data from a Report
Reports Basics
Reports Graph View
Reports List View
Reports Panel
Submitting a Report
Tagging a Report
Updating a Report
IOCs
Deleting IOCs
Exporting IOCs
IOC Basics
IOC Graph View
IOC List View
Tagging IOCs
Threat Actors
Uploading IOCs
Whitelisting IOCs
Phishing Triage
Phishing Triage API
Phishing Triage Basics
Phishing Triage Python SDK
Phishing Workflow in the TruSTAR Web App
Using Phishing Triage with Orchestration Tools
Using Phishing Triage with SIEM Tools
Using Phishing Triage with a TAXII Client
User Settings
Editing Your Profile
Notifications
Admin Features
Enclave Inbox
Automating Forwarding to an Enclave Inbox
Setting up an Enclave Inbox with Proofpoint
Managing Users
Managing the Company Whitelist
Managing the Redaction Library
Setting Up Multi-Factor Authentication (MFA)
Setting up a Service Account
Scripted Extensions
Enclave Scripts
Automated Sharing Between Enclaves
Correlations Between Enclaves
Deleting Reports from an Enclave
Domain-level URL Filtering
Exporting Indicators
Moving Data Between Enclaves
Uploading Data to an Enclave
Managed Connectors
ArcSight: Upload Events to TruSTAR
Azure Sentinel: Import Indicators from TruSTAR
Crowdstrike Falcon: Import Indicators from TruSTAR
Cybereason: Import Indicators from TruSTAR
MISP: Import Reports or Indicators from TruSTAR
Splunk Enterprise: Import Indicators from TruSTAR
Splunk Phantom: Enrich Notable Events
Report Correlation Email
Vetting and Tagging Indicators
Application Integrations
Single Sign-On (SSO)
Okta (SSO)
Ping Identity (SSO)
SIEM
Splunk Enterprise Security
FAQ: TruSTAR for Splunk ES
Install: TruSTAR for Splunk ES
User Guide: TruSTAR for Splunk ES
Splunk
FAQ: TruSTAR for Splunk v1.0.9
Install: TruSTAR for Splunk v1.0.9
IBM QRadar
FAQ: TruSTAR for IBM QRadar
Install: TruSTAR for IBM QRadar
User Guide: TruSTAR for IBM QRadar
Other
AWS GuardDuty
Chrome Extension
Slack
TAXII Applications
Anomali ThreatStream
LogRhythm
Palo Alto MineMeld
TAXII Client Basics
TAXII FAQ
TruSTAR TAXII Server
Orchestration
Demisto
FAQ: TruSTAR for Demisto
Install: TruSTAR for Demisto
User Guide: TruSTAR for Demisto
Phantom Cyber
TruSTAR App for Phantom Cyber FAQ
TruSTAR App for Phantom Cyber Install
TruSTAR App for Phantom Cyber User Guide
Case Management
IBM Resilient
TruSTAR App for IBM Resilient FAQ
TruSTAR App for IBM Resilient Install
TruSTAR App for IBM Resilient User Guide
JIRA
TruSTAR App for Jira FAQ
TruSTAR App for Jira Install
TruSTAR App for Jira User Guide
ServiceNow
TruSTAR App for ServiceNow v1.1.0 FAQ
TruSTAR App for ServiceNow v1.1.0 Install
TruSTAR App for ServiceNow v1.1.0 User Guide
Intelligence Source Integrations
Digital Risk/ATO
Digital Shadows
RiskIQ PassiveTotal
RiskIQ Blacklist Intelligence
Shape Blackfish
SpyCloud
Endpoint
Cisco AMP Threat Grid
Cisco AMP Threat Grid Indicator Query
Crowdstrike Falcon Detect
Crowdstrike Falcon Intelligence
Crowdstrike Falcon Reports
Threat Intelligence
Dragos WorldView
FireEye iSight
IBM X-Force
IBM X-Force IRIS
Intel 471 Adversary Intelligence
Intel 471 Alerts
Intel 471 Malware Intelligence
Recorded Future Hash Intelligence
Recorded Future IP Intelligence
Recorded Future URL Intelligence
Recorded Future Vulnerability Intelligence
VirusTotal
Trusted Community
A-ISAC
F-ISAC
FS-ISAC
NCFTA CyFin and TNT
Alienvault OTX Pulse
Cybersource
Facebook Threat Exchange
Farsight Security
Hybrid Analysis
Joe Sandbox
MISP
TAXII Client
Technical Info
Intel Feeds Source URLs
OSINT Sources Tech Specs
Premium Intel Sources Tech Specs
RSS Open Sources Tech Specs
COVID-19 OSINT Community Enclave
Intro to Intelligence Source Integrations
Technology
TruSTAR Scoring
Normalized Indicator Scores
Priority Event Scores
Priority Indicator Scores
Auto-Allow List
Python SDK
REST API
Redaction Library
FAQs
TruSTAR Policies
API Usage Policy
Privacy Policy
Applications Integrations FAQ
Clearing browser cookies and caches
Contacting TruSTAR Support
Entity Extraction FAQ
Finding Your API Keys
Intelligence Sources FAQ
Login FAQ
Observables Supported by TruSTAR
Request to Archive Premium Intel Source
Security FAQ
Uploading Observables FAQ
What is the TruSTAR Community?
Product Release
Release Notes
All Categories > Station Features > UI Walkthrough
12 articles
Start here to learn about the TruSTAR Web App
Updated 1 week ago by Elvis Hovor
Sharing investigations across your organization using Cases
Updated 1 week ago by Sachit Soni
Displays the most current trends, insights, and analytics for a selected Enclave
How to filter and refine information in Enclaves
Updated 1 hour ago by Elvis Hovor
Using the MiTRE ATT&CK knowledgebase to tag or filter information in Enclaves
Explains the sections of the "home" screen for the TruSTAR Web App
Using the Marketplace to view and subscribe to external intelligence sources
Explains the left-side navigation bar in the TruSTAR Web App
Searching for specific terms in Intel Reports or Indicators
Accessing the TruSTAR Community Chat on Slack
Explains what an Enclave is and how it is used in TruSTAR.
Adding notes to Intel Reports or Indicators
Updated 1 week ago by Shimon Modi
