Network Threat Intelligence Page

The Network Threat Intelligence sample details pages are reserved for URLs, IP addresses and domains. They can be accessed by clicking any submission recognized as a URL submission on the Search Page, by clicking the Network Threat Intelligence link in the Sample Summary header of samples that correlate to some network resource, or by clicking the Network Threat Intelligence link that is displayed in the search box if the search query contains a single URI.

The report summary section is an overview of all information available for a specific network resource, with additional information accessible using the sidebar menu.

The Network Threat Intelligence sidebar menu section contains the following items:

• URL Analysis

  Contains the top threats found on the URL, as well as historical data for that URL. This data comes from the ReversingLabs Network Threat Intelligence API.

• Domain Analysis

  Contains the top threats found on the domain, as well as historical data for that domain. This data comes from the ReversingLabs Domain Threat Intelligence API.

• IP Analysis

  Contains the top threats found on the IP address, as well as historical data for that address. This data comes from the ReversingLabs IP Threat Intelligence API.

Alongside network threat intelligence, users can also inspect previous ReversingLabs Cloud Sandbox dynamic analysis results, submit the network resource for (re)analysis, or interact with files related to the network resource.