Use AutoFocus-Hosted MineMeld
Table of Contents
Use AutoFocus-Hosted MineMeld
MineMeld is available on a per support account
basis. Use MineMeld to Find
High-Risk Artifacts and gain more visibility into threats
on your network. When MineMeld is running, it extracts and processes
indicators based on the nodes that are connected.
- ClickAppson the navigation pane, andStartMineMeld.A link to MineMeld displays on the navigation pane when MineMeld starts deploying.
- AccessMineMeldfrom the navigation pane.
- Choose from the following actions:
- Get an overview of miner, processor, and output nodes currently in use on theDashboard.When using MineMeld for the first time (or after a resetting it), the default configuration of nodes sends IP addresses, URLs, and domains from a set of block lists to the Indicator Store, a storage space in AutoFocus for external indicators. ClickIndicatorson the navigation pane to view the Indicator Store.
- View a library of miner, processor, and outputPrototypesyou can clone to Create a Minemeld Node.
- View a complete list ofNodesyou’ve created.
- Choose other nodes from which a node will receive indicators. Edit the inputs of the nodeConfigto Connect MineMeld Nodes. The Config tab also allows you to Delete a MineMeld Node.
- View theLogs, which is a record of indicators that MineMeld extracted from feed sources.
For more guidance on how to use MineMeld, see MineMeld.