Flow property integration with X-Force Exchange
Some flow properties in Network Insights are integrated with IBM X-Force Exchange to help you quickly determine whether the value requires further investigation.
On the Flow Information window, the following properties include links that you can click to open X-Force Exchange:
-
TLS Server Name Indication
-
HTTP Host
-
DNS Domain Name
-
File Hash
-
MD5 File Hash
-
SHA1 File Hash
-
SHA256 File Hash
-
Suspect content descriptions that come from the IBM X-Force signature library.
The following image shows some of the flow properties that are integrated with X-Force Exchange.