Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Flow property integration with X-Force Exchange

Some flow properties in Network Insights are integrated with IBM X-Force Exchange to help you quickly determine whether the value requires further investigation.

On the Flow Information window, the following properties include links that you can click to open X-Force Exchange:

  • TLS Server Name Indication

  • HTTP Host

  • DNS Domain Name

  • File Hash

  • MD5 File Hash

  • SHA1 File Hash

  • SHA256 File Hash

  • Suspect content descriptions that come from the IBM X-Force signature library.

The following image shows some of the flow properties that are integrated with X-Force Exchange.

File metadata: SHA256 hash b41e6f809830593784020403e6b80800d9abf6d933b60bea93cb0ef22fb7238, file size 55 bytes, name s52615072088657, entropy 3.654536, SHA1 hash 4b11e32731c1b8e5c736a2c651732005901f4015, MD5 hash 45fca0e8a40c488bbd7a546a1745b585. Used in cybersecurity for file analysis.