What Is IRIS?
IRIS is a collaborative digital platform designed for incident response analysts to share complex investigations at a technical level. It can be installed on a dedicated server or as a portable application for roaming investigations where internet access might not be available.
Integration Actions
Cyber Triage has a report module that can send data to an IRIS server. The report includes:
- IOCs of bad items
- Timeline of bad items
Why Is It Useful?
IRIS is used in some labs to manage case assignments, IOCs, and create final reports. This integration makes it easier and faster to export results from Cyber Triage and into IRIS for future correlations and reporting.
What Are the Deployment Options?
None. You simply configure the IRIS server and choose to run the report module.
What Is the Required Cyber Triage Version?
Team. IRIS is an additional add-on license. Contact sales@cybertriage.com for more details.