Attributes

The Attributes tab shows all event attributes contained in the threat intelligence database of Threat Defender.

The table provides the following information:

Field

Description

Updated At

The time the attribute was last updated.

Category

The category of the attribute.

Type

The type of the attribute.

Value

The value of the attribute. By mouseover you can see the full value in a tooltip.

Tags

The number of tags assigned to the attribute in the database. By mouseover you can see the tags in a tooltip.

Indicator

The icon in this column indicates whether the attribute is an indicator of compromise or attack (indicator_yes_icon) or not (indicator_no_icon).

Click the view_attr_icon icon in the last table column of an attribute to access the details page of the event this attribute is assigned to.