Define threat opinions

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 2분
  • Define threat opinions as an assessment of the accuracy of the information in a STIX object.

    시작하기 전에

    Role required: sn_ti.admin

    프로시저

    1. Navigate to All > Threat Intelligence > IoC Repository > Threat Opinions.
    2. Click New.
    3. Complete the fields in the form as appropriate.
      FieldDescription
      Opinion The producer's opinion about the STIX object.
      Explanation The producer's explanation about the opinion.
      Authors Specifies the name of the author (example, an analyst).
      Source Specifies the threat source from which this record is created.
      Source ID Unique identifier for this object in the threat source.
      Created Time in Source Specifies the time the object is created in the source.
      Modified Time in Source Specifies the time the object is modified in the source.
    4. Click Submit.

    다음에 수행할 작업

    Click any of the following related lists to view additional information about objects associated with the threat opinion.

    Related Links and Related Lists Description
    Show Relationships Opens the STIX Visualizer where you can view the relationship of the STIX object.

    Show Relationships appears only when the object has an associated object.

    Associated Objects List of objects the threat opinion applies to.
    Associated Indicators List of indicators the threat opinion applies to.
    Associated Observables Lists observables associated with this object.