Blog New Tagging System for Private Enclaves

New Tagging System for Private Enclaves

At TruSTAR we’re constantly working with our SOC team users to gather feedback about how to make our product better.

Today we’re introducing Enclave Tags, a new tagging feature specifically designed for Private Enclave users who are often working cases across different shifts, teams, and time zones.

Streamline Analysis Workflow

Continuity of incident analysis can be challenging for security operator teams consisting of multiple members, as they have to ensure the appropriate information is captured with Incident Reports. With Enclave Tags, operators can share specific TruSTAR reports more easily by categorizing them based on internal naming schemes, such as department names, internal SOC team naming conventions, or ticket numbers. This custom tagging feature reduces redundant workflow and saves time among operator teams.

Increase Searchability

For Private Enclave power users, the number of reports of interest on the TruSTAR platform can get quite large. Custom Enclave Tags will help you find and categorize reports faster. You can sort cases by tags to discover patterns more easily, track specific incidents, or perform audits.


What’s the difference between Enclave Tags and Categories?

Enclave Tags and Categories exist on different parts of the TruSTAR platform. Essentially, Enclave tags are private, while Categories are public and available to the wider TruSTAR community.

You can add Enclave Tags to any report on the TruSTAR platform and these will only be visible to members belonging to that Enclave.

You’re only prompted to create Categories when you submit a report to the TruSTAR Community. Categories are publicly searchable tags that you select when you create and submit a new report. You can read more about Categories here.

Are Enclave Tags visible to everyone?

No, Enclave Tags are only visible to other members within your Private Enclave.

How To Create an Enclave Tag

Step 1: Pull up any incident and select the Manage button.

Step 2: Enter a new Enclave Tag name, or select an existing tag from the drop-down list of custom Enclave Tags.

Step 3: You will now see all selected Enclave Tags on your report details panel.

Interested in learning more about how you can improve collaboration on TruSTAR? Check out our posts on how to use Chat and how to Save and Share Cases.

Enrich Your Data With Independent Threat Intelligence Research TruSTAR is a product built by analysts, for analysts. Back in our SOC days, we checked-in with influencers in our field whenever we had an indicator ... Read More
Unveiling Our New Blockchain Research Tool at Black Hat Arsenal and DEF CON Recon Village 2018 Las Vegas, Aug. 06, 2018 (GLOBE NEWSWIRE) — The data science team behind TruSTAR will be presenting the only blockchain research tool selected for ... Read More
We've Made It Easier For You To Find High-Priority Indicators Today we’re announcing a major update to our IOC management feature to help security teams identify high-priority indicators while investigating ... Read More
Improve Efficiency of Intelligence Analysis Using IOC Management Feature Cyber observables and IOCs are the building blocks of intelligence analysis. They're critical to making accurate decisions throughout the ... Read More