Configure Threat Intel Report Types - Threat Intel Management Guide - 6.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Threat Intel Management Guide
Product
Cortex XSOAR
Version
6.5
Creation date
2022-09-29
Last date published
2023-12-12
End_of_Life
EoL
Category
Threat Intel Management Guide

Threat intel reports are categorized by type, which determines the layout that is displayed for the report. Cortex XSOAR includes the following out-of-the-box report types from the Threat Intel Reports (BETA) content pack:

  • Campaign

  • Executive Brief

  • Malware

  • Threat Actor

  • Vulnerability

You can customize the layout of an existing out-of-the-box report or add new report types.

You can create new threat intel report types to support use cases not covered by the out-of-the-box types, which may require different report layouts. For example, you may want to add a new type for a specific threat hunting report that your organization needs, which isn’t covered by one of the out-of-the-box template types.

  1. Go to Settings → OBJECTS SETUP → Threat Intel Reports → Types.

  2. Add a New Type.

  3. Enter a Name and choose the Layout that you want associated with this report type.

  4. Save the type.