Others, like Windows servers and endpoints you probably already have. Some of these other asset types you would have to purchase or own, such as hardware firewalls. We will cover it in a future blog post, or you can read about now in the documentation (Phantom Portal login required).įor all the others, you’re going to need usernames and passwords or API keys.
It’s usually used for pushing data from an external program. There’s also a fourth built-in Asset type, though it’s not pre-configured. MaxMind is a commercial product, but we’ve licensed it for you to use with Phantom (you’re welcome.) So these three services don’t require any credentials to use. And for Volatility and MaxMind, the services are on the Phantom server itself. In the latest release, a brand-new Phantom instance has three Assets already on it Whois, Volatility, and MaxMind (IP geolocation.) The reason these are included, is because whois depends on open Internet servers, which require no authentication, so we can create that asset for you.
You can read more about Phantom and Assets here. Assets are the devices, software and services that Phantom talks to for information and taking action. One of the first things you will want to do after downloading Phantom is make sure you have Assets to work with. If not, you can register for the Free Community Edition of Phantom and join our $10,000 Playbook & App Contest here. Hopefully by now you’ve downloaded and booted up your copy of Phantom.
0 kommentar(er)
