Enablement of Logsign Threat Intelligence

Logsign Unified SecOps Platform rapidly investigates hidden threats, IoCs and suspicious attack vectors combining global threat intelligence data, it also uses internal threat source feeds to risk prioritization. Over 45 Threat Intelligence Feed Lists support Logsign Unified SecOps Platform Threat Intelligence Services. 

When Logsign detects a traffic to/from TI Feed IPs, it creates an Intelligence column in that particular log.

You can reach the details of Threat Intelligence Service under List -> Name section.

Click Settings -> Enrichment ->  Logsign TI  tab to Enable Threat Intelligence Service.




Was this article helpful?
0 out of 1 found this helpful

Articles in this section

Become a Certified Logsign User/Administrator
Sign-up for Logsign Academy and take the courses to learn about Logsign USO Platform in detail. Enjoy the courses, and get your badges and certificates. In these courses, you'll learn how to use Logsign in your work and add value to your career.
Visit Our Blog
Our Logsign USO Platform illustrate our expertise. So do the blog. Through our blog posts, deepen your knowledge on various SecOps topics or get updated about important news & modern approaches for cybersecurity. Get into the habit of reading valuable information provided by Logsign. Be a step ahead.