Table Of Contents
What’s new
Flashpoint Managed Attribution customers can now safely download collection files from Flashpoint Ignite. This update allows users to pivot directly from a file attachment in their search results to a secure, isolated Managed Attribution (MA) session.
Previously, Ignite users lacked a streamlined method to download potentially malicious files from chat services or deep and dark web forums without risking their local machines. With the addition of the Download Safely button next to the standard download icon, users with an active Managed Attribution subscription can now transition these files into a protected environment quickly and easily.
Why it matters
As a primary source collector, Flashpoint captures data directly from the illicit communities where threats originate. While investigators often need to interact with files shared in these environments to advance their missions, downloading them locally introduces risk to the organization’s network and the analyst’s digital fingerprint.
This update provides a critical operational advantage by allowing you to bypass platform-specific barriers. Many threat actor platforms and chat services require active accounts to access or download files, which can create unnecessary attribution risks for an investigator. By using this feature, you are downloading the file directly from Flashpoint’s secure storage rather than the original source. This allows your team to:
- Accelerate speed to insight: Remove the friction between discovery in Ignite and technical analysis in Managed Attribution.
- Circumvent account requirements: Access files without needing to maintain or log into accounts on illicit platforms.
- Maintain low-attribution: Protect your digital identity by avoiding direct interaction with hostile infrastructure.
How it works
- Locate a file attachment in an Ignite search thread.
- Click the Download Safely icon.
- The platform creates a modal with a secure link to the file, which is stored in a secure Google Cloud Platform (GCP) bucket.
- Analyze: Clicking the button automatically copies the link to your clipboard and opens your Managed Attribution browser.
Once inside the isolated environment, you can safely download the file without risking your host computer or your organization’s network.
For more information on how our integrated platforms can protect your organization, book a demo.
Frequently Asked Questions
How does Flashpoint’s Primary Source Collection differ from other intelligence providers?
Unlike competitors who may rely heavily on automated scrapers or reprocessed data, Flashpoint leverages a combination of automation and human-driven collection to delve into the most difficult-to-reach areas of the internet. Our approach is driven by specific customer requirements, ensuring that the data is relevant, timely, and gathered directly from the original communities where threats originate.
What types of data can I access using this integrated workflow?
You can use this workflow for any file attachments found within Flashpoint Ignite search threads, which include data gathered from difficult-to-access online spaces. This encompasses signal-rich discussions from forums, around-the-clock conversations in chat services like Telegram or Discord, and content from imageboards or paste sites where threat actors frequently share malicious activity.
How does Managed Attribution protect my digital fingerprint during an investigation?
Managed Attribution provides a secure virtual environment that is completely isolated from your host computer and corporate infrastructure. It allows you to conceal your digital identity, browse safely, and interact with nefarious content without the risk of revealing your true IP address or being tracked by threat actors.
What is the primary benefit of the Download Safely feature?
The “Download Safely” feature allows you to pivot from a file attachment discovered in Flashpoint Ignite directly into an isolated Managed Attribution (MA) session with a single click. This ensures that potentially malicious files—such as malware logs or leaked documents—are handled in a secure environment rather than on your local machine, protecting your organization’s network and your own digital footprint.