Views:

Threat Connect

Threat Connect allows the administrator to view related threat information from the global intelligence database.

Data is only sent when the administrator manually clicks the “View in Threat Connect” button in Detection Details view.

Data collected
  • IP address
  • URL
  • host name
Console location
  • The user manually triggers Threat Connect connection in the Detection Details view of Network Detections.

    Detections > Network Detections > Detection Details > Connection Details

    • View in Threat Connect

    Network Detections

  • The user manually triggers Threat Connect connection in the Detection Details view of Email Messages.

    Detections > Email Messages > Detection Details > Connection Details

    • View in Threat Connect

    Email Messages

Console settings