Configure Threat Intel Report Types - Threat Intel Management Guide - 6.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Threat Intel Management Guide

Cortex XSOAR
Creation date
Last date published
Threat Intel Management Guide

Threat intel reports are categorized by type, which determines the layout that is displayed for the report. Cortex XSOAR includes the following out-of-the-box report types from the Threat Intel Reports (BETA) content pack:

  • Campaign

  • Executive Brief

  • Malware

  • Threat Actor

  • Vulnerability

You can customize the layout of an existing out-of-the-box report or add new report types.

You can create new threat intel report types to support use cases not covered by the out-of-the-box types, which may require different report layouts. For example, you may want to add a new type for a specific threat hunting report that your organization needs, which isn’t covered by one of the out-of-the-box template types.

  1. Go to Settings OBJECTS SETUPThreat Intel ReportsTypes.

  2. Add a New Type.

  3. Enter a Name and choose the Layout that you want associated with this report type.

  4. Save the type.