Enrichment

Enrichment adds contextual information and assigns risk scores to indicators by identifying their malicious properties. Intel Exchange integrates with multiple third-party enrichment tools to enrich IP addresses, URLs, hashes, domains, email addresses, and vulnerabilities. For more information on third-party enrichment tools, see Enrichment Tools.

You can enrich threat data manually or automatically using enrichment policies. For more information, see Enrichment Policy.

To manually enrich the threat data object, select an enrichment tool and click Enrich in the Enrichment Details section.