Threat management FAQs

In Threat Intelligence Insights, a threat is a repository where you can share, collaborate with, and contain information on an existing or emerging threat. You can use it to save reports on indicators of compromise (IoC), text comments, or any other content that can help you or others in forensic investigations.

1. How do I manage a threat?
2. Is there a limit to the number of threats that I can share?
3. Is there a limit to the storage space for a threat that I save?

Threat Intelligence Insights includes the following categories:

• My Threats

  Your private threat that only you can view and edit unless you opt to share to individuals whom you want to collaborate.

• Shared with me

  Threats that are shared with you.

• Shared within account

  Threats that are shared within your organization.

• Public Threats sourced via X-Force Exchange

  Threats that are populated by Public Collections on X-Force® Exchange.

If the threat is set to 'view only', then no one can make changes. If it is set to 'contribute', then users who are logged in to X-Force Exchange can make changes.

How do I manage a threat?

Your threats, threats that are shared with you, threats that are shared within your organization, and public threats that are sourced via X-Force Exchange are all accessible from the Threat Intelligence Insights landing page. You can view threat details and indicators in any of these threats.

Is there a limit to the number of Threats that I can share?

There is no limit to the number of Threats that you can share. Depending on your settings, the users might be viewers only, or a combination of viewers and contributors.

Is there a limit to the storage space for Threats that I save?

There is no storage limit for Threats.