Threat Intelligence Security Center Catalog
The Threat Intelligence Security Center Catalog is a curated list of Threat Intelligence feeds and enrichment integrations available in the application for you to enable them after adding the required information, and schedule the feed to automatically ingest Threat Intelligence data on a set frequency.
As a sn_sec_tisc.admin, you can also search and edit the existing source configurations, enable or disable, and delete the configurations from the Catalog. Any new data source is added to the Catalog, that will appear as a new configuration card on the Catalog.
Role required:
- sn_sec_tisc.admin (create/update)
- sn_sec_tisc.analyst (read)
Remarque :
The cards on the catalog are differentiated by its label which is present at the top of the card Threat Feed/Enrichment.
Actions on the Catalog view
The Catalog view enables you to perform the following actions.
| Action | Description |
|---|---|
| All | Use this dropdown menu to filter feeds and integrations based on their current state. You can filter based on the following states:
|
 |
Use this action to refresh the Catalog. |
 |
Use this action to sort all the feeds and integrations based on the following:
|
| Search in catalog | Use this action to search for feeds/ integrations based on the name and description within the catalog. |