Product Update — Dynamic Distribution & External Lookups
We are excited to announce the latest set of features that will further streamline your intelligence exchange and analysis workflow. Please keep reading to learn more about these features.
Dynamic Distribution — You can now simultaneously email the redacted incident reports to external 3rd parties while you are submitting them to TruSTAR. With this feature you can take advantage of TruSTAR’s redaction capability to remove company attributable information and then email the redacted incident reports to information sharing organizations and other sharing partners. On the submission page you will find the checkbox option “Email Incident Report”. If you select this option your native mail client window will be populated with the redacted report when you click “Submit”. You can add the email address of the external recipient(s), edit the report and send it to them.
External Lookups — With this feature you can search external data sources directly from the graph visualization view. For example, an analyst may want to search an external WHOIS database for additional information about an IP indicator. To use this feature, click on any IP indicator node in the graph visualization and you will see the Lookup hyperlink in the Details panel (see below). When you click on the Lookup hyperlink it will show you the results of the WHOIS site query in a different browser window. Please note this feature is currently available only for IP address indicators. We will be releasing Lookup integrations for more indicator types in the near future.
By default WHOIS lookup is configured for all users. If you want to use this for other integrations click on the +Add Custom Integrations button.
This will launch the configurations window. In the lookup URL replace the query IP address with %IP% parameter. You can give this external lookup a customized name.
If you have any questions please feel free to contact us at support@trustar.co or Slack us on the TruSTAR-Users channel.
