Analyst Workbench
Analyst Workbench is a consolidation of a few commonly used tools in the security industry. Analysts can use these tools from CTIX and don't need to look for them on the internet or install them separately.
Use Encode Decode Base64
Base64 encoding is used to represent binary data using only a limited, common subset of the available characters. Use this utility inside CTIX to encode or decode the data.
From Main Menu, navigate to Analysis and Click Analyst Workbench.
Click Encode - Decode: Base64.
Type data to encode or decode it.
To copy the data, click three vertical dots and select Copy.
To clear the data, click three vertical dots and select Clear.
To upload a file, click three vertical dots and select Upload a File.
To download the text file of encoded data, click three vertical dots and select Download Encoded Data.
Use CVSS Calculator
CVSS calculator is used to capture principal characteristics of vulnerabilities and produce a numerical score reflecting their severity. The numerical score is calculated based on the selected parameters and helps you properly assess and prioritize risks. CTIX has a built-in Common Vulnerability Scoring System (CVSS) score calculator.
From Main Menu, navigate to Analysis and click Analyst Workbench.
Click CVSS Calculator.
Select CVSS 2 or CVSS 3. These are two versions available.
Select the parameters for your score and click Show Scores.
Use Fang Defang
Using Fang-Defang analysts can neutralize malicious information with an obfuscated representation so that it is not dangerous if this information is inadvertently clicked or automatically processed in error.
From Main Menu, navigate to Analysis and click Analyst Workbench.
Click Fang - Defang.
To copy the data, click three vertical dots and select Copy.
To clear the data, click three vertical dots and select Clear.
To obfuscate information from a file, click three vertical dots and select Upload a File. Supported formats are .xls, .csv, .txt, .xml, .doc, and .docx
To download the text file of data, click three vertical dots and select Download.
Use STIX Conversion
Use STIX conversion to convert STIX 1.x format data to STIX 2.x and vice versa.
From the Main Menu, navigate to Analysis and click Analyst Workbench.
To copy the data, click three vertical dots and select Copy.
To upload a file, click three vertical dots and select Upload a File.
To clear the data, click three vertical dots and select Clear.
To download the text file of STIX data, click three vertical dots and select Download Data.
Use Network Utilities
The Network Utility tool serves as an IP and Domain lookup. It inspects IP and Domain details and provides details such as Domain Certificate Analysis, traceroute, and ping details.
Navigate to Main Menu, and select Analysis and Network Utilities.
Enter a domain name or an IP address and click Search.
You can view the domain and IP lookup details.