Working an investigation
Tags
Team-shared analyst labels on addresses, prefixes, networks and services.
Analyst-applied labels attached to an entity and shared across the team. A label applied to an ASN is primarily of use to the next analyst who reaches it.
- Each tag records author and timestamp, so a disputed label can be traced rather than accepted implicitly.
- Selecting a tag returns every entity carrying it.
- Authors may remove their own tags; administrators may remove any tag.
- Labels are 2–32 characters, lowercase; spaces are normalised to dashes.