Indicator Enrichment Sample Clauses
The Indicator Enrichment clause establishes the process by which additional data or context is added to existing indicators, such as security alerts or performance metrics, to enhance their usefulness. In practice, this may involve appending threat intelligence, geolocation data, or historical trends to raw indicators, thereby providing a more comprehensive understanding of each event. The core function of this clause is to ensure that indicators are more actionable and informative, helping stakeholders make better decisions and respond more effectively to potential issues.
Indicator Enrichment. Indicators of Compromise (“IoCs”) associated with detections are automatically extracted, scored, and enriched leveraging open source and BlueVoyant proprietary threat intelligence. Enriched IoCs are visible within Wavelength™ and are assigned a reputation (ex: Good, Suspicious, Bad) and classification (ex: botnet, ▇▇▇▇, crypto-miner, etc.).