Setting Indicator Threat and Confidence Ratings

Last Updated: Nov 15, 2018 02:00PM EST
User
None

Overview

ThreatConnect® allows users to set an Indicator’s Threat Rating and its associated Confidence Rating. The Threat Rating identifies how much of a threat an Indicator represents and is measured on a scale of 0–5 skulls—the higher the rating, the higher the threat. The Confidence Rating is an expression of how confident an owner is that its Threat Rating assessment is accurate, and it is measured on a scale of 0–100. These two rankings are important because they allow users to focus on Indicators that represent the most active and relevant threats to their networks.

Steps

  1. From the top navigation bar (Figure 1), place the cursor over BROWSE and then over the INDICATORS option. Click on one of the objects (HOST Indicator in this example) to display a results table (Figure 2).
  2. Click on one of the entries, and the Details flyout for that entry will appear (Figure 3).
  3. Click the Details icon at the top right corner of the flyout, and the Overview tab of the Details screen will appear (Figure 4). Alternatively, hover over the object's entry in the table in Figure 2 and click on the Details icon that appears on the right side of its Summary cell to go straight to the Overview tab of the Details screen.
  4. Scroll down to the Details card (Figure 5), click on the appropriate skull to set the Threat Rating, and drag the slider to set the Confidence Rating.
  5. Changes are automatically saved.

20022-06 EN Rev. F

Contact Us

  • ThreatConnect, Inc.
    3865 Wilson Blvd.
    Suite 550
    Arlington, VA 22203

    Toll Free:   1.800.965.2708
    Local: +1.703.229.4240
    Fax +1.703.229.4489

    Email Us



https://cdn.desk.com/
false
desk
Loading
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
about
false
Invalid characters found
/customer/en/portal/articles/autocomplete