Enrichment Management

Intel Exchange enriches the threat data by removing false positives, adding contextual information, and scoring indicators by identifying key malicious properties.

Intel Exchange has integrations defined with many enrichment tools. Analysts can perform enrichment operations either manually or by configuring an enrichment policy with the help of third-party tool integrations.

For more information, see Enrichment Management.