Enrichments add context and intelligence to email addresses, IP addresses, and file hashes. The Enrichments dialog is context sensitive, meaning specific enrichment options are based on the column selected.
Email Address Enrichments
- Enrich Email - validates the address is well formed, provides the email domain, the disposition (free/organization/disposable), and the Alexa traffic rank
- Verify Email - uses the Abstract API service to verify the deliverability of the mailbox, quality score and other advanced information (requires API token)
IP Address Enrichments
- Gigasheet OSINT Feeds - check IPs against the top 15 free threat feeds over the last 90 days
- GEOIP - bulk GEOIP lookup and add columns for country and city location of IP addresses
- Recorded Future - request threat intelligence Risk Score and number of Risk Rules triggered for given IP or hash (requires API token)
- GreyNoise - query for background noise and internet wide scanning (requires API token)
File Hash Enrichments
- Virustotal - retrieve data on file hashes or IPs (requires paid API token)