Setting Indicator Threat and Confidence Ratings

Last Updated: Nov 20, 2019 03:27PM EST


ThreatConnect® allows users to set an Indicator’s Threat Rating and its associated Confidence Rating. The Threat Rating identifies how much of a threat an Indicator represents and is measured on a scale of 0–5 skulls—the higher the rating, the higher the threat. The Confidence Rating is an expression of how confident an owner is that its Threat Rating assessment is accurate, and it is measured on a scale of 0–100. These two rankings are important because they allow users to focus on Indicators that represent the most active and relevant threats to their networks. See Evilness Rating: Skulls Scale for Cyber Threats for guidelines on assigning Threat Ratings and Confidence Ratings.

Setting Threat and Confidence Rating

  1. From the top navigation bar (Figure 1), place the cursor over Browse and then over the Indicators option. Click on one of the objects (Host Indicator in this example) to display a results table (Figure 2).
  2. Click on one of the entries. The Details drawer for that entry will be displayed (Figure 3).
  3. Click the Details icon at the top right corner of the drawer. The Overview tab of the Details screen will be displayed (Figure 4). Alternatively, hover over the object's entry in the table in Figure 2 and click on the Details icon that appears on the right side of its Summary cell to go straight to the Overview tab of the Details screen.
  4. Scroll down to the Details card (Figure 5). Click on the appropriate skull to set the Threat Rating. Drag the slider to set the Confidence Rating. The changes are automatically saved.

20022-07 EN Rev. B

Contact Us

  • ThreatConnect, Inc.
    3865 Wilson Blvd.
    Suite 550
    Arlington, VA 22203

    Toll Free:   1.800.965.2708
    Local: +1.703.229.4240
    Fax +1.703.229.4489

    Email Us
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
Invalid characters found