Attributes

The Attributes submenu shows all event attributes contained in the intelligence database of Threat Defender.

The table provides the following information:

Field	Description
Updated At	The date and time when the attribute was last updated in the database.
Category	The category of the attribute.
Type	The type of the attribute.
Value	The value of the attribute. By mouseover you can see the full value in a tooltip.
Tags	The number of tags assigned to the attribute. By mouseover you can see the tags in a tooltip.
Indicator	The icon in this column indicates whether the attribute is an indicator of compromise or attack () or not ().

Click the icon in the last table column of an attribute to access the details page of the event this attribute is assigned to.