Profiles — Indicators of Compromise (IoCs) page

Prev Next

Click to view the details of URL, IP address, and file hash IOCs, and to pivot to Trellix EDR real-time search with file hash IOCs for further investigation.

Item

Description

Filters

Select options to filter the IOC table view.

Table view

View a table of IOC information. You can select up to 10 IOCs.

  • IOC Type

  • IOC Value

  • Category

  • Insights Type

  • Comments

  • Determinism

  • Lethality

  • Threat Name

  • Classification

  • Devices Impacted

  • Prevalent In Sectors

  • Prevalent in Countries

  • Added on

  • First seen by Trellix

  • First detected in your environment

  • Last detected in your environment

Real-Time Search in Trellix EDR

Click to use Real-time Search in Trellix EDR. You can then review remediation actions and investigate more about the IOCs.

Note

You must have an active Trellix EDR subscription to use this option. Make sure that your user account has Trellix EDR scope.