AutoFocus with MineMeld is an interactive investigation tool used to assist in the management and investigation of threat intelligence. This document describes the operations, administration, and management of AutoFocus and MineMeld.
The content of this activity addresses the configuration of the different types of EDL (IP, URL, DNS) on the firewall, and the configuration of Minemeld either on a VM or on cloud (Autofocus). It also describes the most common scenarios other than blocking bad reputation domains to use EDL and Minemeld (i.e. allow office 365).