Define threat notes

Define threat notes that convey information to provide further context or analysis that is not available in existing objects.

始める前に

Role required: sn_ti.admin

手順

1. Navigate to All > Threat Intelligence > IoC Repository > Threat Notes.
2. Click New.
3. Complete the fields in the form as appropriate.

   Field	Description
   Abstract	Specify a brief summary of the note content.
   Content	Specifies the content of the note.
   Authors	Specifies the name of the author (example, an analyst).
   Source	Specifies the threat source from which this record is created.
   Source ID	Unique identifier for this object in the threat source.
   Created Time in Source	Specifies the time the object is created in the source.
   Modified Time in Source	Specifies the time the object is modified in the source.

4. Click Submit.

次のタスク

Click any of the following related lists to view additional information about objects associated with the threat notes.

Related Links and Related Lists	Description
Show Relationships	Opens the STIX Visualizer where you can view the relationship of the STIX object. Show Relationships appears only when the object has an associated object.
Associated Objects	Lists of objects that the threat notes apply to.
Associated Indicators	Lists of indicators that the threat notes apply to.
Associated Observables	Lists observables associated with this object.