true
Blog New Tagging System for Private Enclaves

New Tagging System for Private Enclaves

At TruSTAR we’re constantly working with our SOC team users to gather feedback about how to make our product better.

Today we’re introducing Enclave Tags, a new tagging feature specifically designed for Private Enclave users who are often working cases across different shifts, teams, and time zones.

Streamline Analysis Workflow

Continuity of incident analysis can be challenging for security operator teams consisting of multiple members, as they have to ensure the appropriate information is captured with Incident Reports. With Enclave Tags, operators can share specific TruSTAR reports more easily by categorizing them based on internal naming schemes, such as department names, internal SOC team naming conventions, or ticket numbers. This custom tagging feature reduces redundant workflow and saves time among operator teams.

Increase Searchability

For Private Enclave power users, the number of reports of interest on the TruSTAR platform can get quite large. Custom Enclave Tags will help you find and categorize reports faster. You can sort cases by tags to discover patterns more easily, track specific incidents, or perform audits.

FAQ

What’s the difference between Enclave Tags and Categories?

Enclave Tags and Categories exist on different parts of the TruSTAR platform. Essentially, Enclave tags are private, while Categories are public and available to the wider TruSTAR community.

You can add Enclave Tags to any report on the TruSTAR platform and these will only be visible to members belonging to that Enclave.

You’re only prompted to create Categories when you submit a report to the TruSTAR Community. Categories are publicly searchable tags that you select when you create and submit a new report. You can read more about Categories here.

Are Enclave Tags visible to everyone?

No, Enclave Tags are only visible to other members within your Private Enclave.

How To Create an Enclave Tag

Step 1: Pull up any incident and select the Manage button.

Step 2: Enter a new Enclave Tag name, or select an existing tag from the drop-down list of custom Enclave Tags.

Step 3: You will now see all selected Enclave Tags on your report details panel.

Interested in learning more about how you can improve collaboration on TruSTAR? Check out our posts on how to use Chat and how to Save and Share Cases.

New Context Panel Helps Analysts Prioritize Reports Faster Using Trusted Intelligence Sources Introducing the New Context Panel Reducing friction in the analyst workflow is central to how we evolve our product. Today TruSTAR has released a new ... Read More
IBM & City of Los Angeles Select TruSTAR to Build Security Tool for Local Businesses On Tuesday, at the 2019 LA Cyber Lab Summit, The City of Los Angeles announced their business partnership with IBM Security and TruSTAR to help local ... Read More
Ingest Intelligence Faster With the New TruSTAR Google Chrome Extension If you’re an intelligence analyst, you’re probably spending a lot of time searching and scraping the internet for threat intelligence to speed ... Read More
Enrich Your Data With Independent Threat Intelligence Research TruSTAR is a product built by analysts, for analysts. Back in our SOC days, we checked-in with influencers in our field whenever we had an indicator ... Read More