Configure Threat Intel Report Types - Threat Intel Management Guide - 6.8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Threat Intel Management Guide

Product
Cortex XSOAR
Version
6.8
Creation date
2022-09-29
Last date published
2023-12-12
End_of_Life
EoL
Category
Threat Intel Management Guide

Threat intel reports are categorized by type, which determines the layout that is displayed for the report. Cortex XSOAR includes the following out-of-the-box report types:

  • Campaign

  • Executive Brief

  • Malware

  • Threat Actor

  • Vulnerability

You can customize the layout of an existing out-of-the-box report or add new report types.

Create Threat Intel Report Types

Threat intel reports are categorized by type, which determines the layout that is displayed for the report. Cortex XSOAR includes the following out-of-the-box report types from the Threat Intel Reports (BETA) content pack:

  • Campaign

  • Executive Brief

  • Malware

  • Threat Actor

  • Vulnerability

You can customize the layout of an existing out-of-the-box report, or add new report types.

You can create new threat intel report types to support use cases not covered by the out-of-the-box types, which may require different report layouts. For example, you may want to add a new type for a specific threat hunting report that your organization needs, which isn’t covered by one of the out-of-the-box template types.

  1. Go to Settings OBJECTS SETUPThreat Intel ReportsTypes.

  2. Add a New Type.

  3. Enter a Name and choose the Layout that you want associated with this report type.

  4. Save the type.