Use AutoFocus-Hosted MineMeld
Table of Contents
Use AutoFocus-Hosted MineMeld
MineMeld is available on a per support account
basis. Use MineMeld to Find
High-Risk Artifacts and gain more visibility into threats
on your network. When MineMeld is running, it extracts and processes
indicators based on the nodes that are connected.
- Click Apps on the navigation
pane, and Start MineMeld.A link to MineMeld displays on the navigation pane when MineMeld starts deploying.
- Access MineMeld from the navigation
pane.
![]()
- Choose from the following actions:
- Get an overview of miner, processor, and output nodes currently in use on the Dashboard.When using MineMeld for the first time (or after a resetting it), the default configuration of nodes sends IP addresses, URLs, and domains from a set of block lists to the Indicator Store, a storage space in AutoFocus for external indicators. Click Indicators on the navigation pane to view the Indicator Store.
- View a library of miner, processor, and output Prototypes you can clone to Create a Minemeld Node.
- View a complete list of Nodes you’ve created.
- Choose other nodes from which a node will receive indicators. Edit the inputs of the node Config to Connect MineMeld Nodes. The Config tab also allows you to Delete a MineMeld Node.
- View the Logs, which is a record of indicators that MineMeld extracted from feed sources.
For more guidance on how to use MineMeld, see MineMeld.
