Create Custom Alert Categories
You can create custom categories based on your organization's requirements to categorize alert information. For example, you can create a Zero-day Vulnerability category to share zero-day vulnerability advisories. Admins can map fields such as text boxes, single-select, multi-select, and custom fields to categories. When creating alerts and submitting threat intel, the Additional section displays fields based on the category selected for the alert. Create custom categories and assign fields to allow alert creators to add additional information to the alert.
Before you Start
You must have the View, Create and Update permissions for categories.
Steps
To create a new custom category, do the following.
Sign in to the Analyst Portal and click Administration > Settings in the lower-left corner.
Click Core Settings > Category > Custom Categories.
To create a custom category, click Create in the upper-right corner.
Enter a name for the category. For example, Critical Vulnerability.
Select a color label for the category. The color is used to identify the category in the Member Portal.
Enter a description to communicate the purpose of the category. For example, This category is used to share Zero-day vulnerability advisories.
Select an image for the category. The default category image is the image configured in Settings > Theme Settings > Logo Management. The selected image is automatically added to the alert when the category is used.
Select the Allow members to submit Threat Intel in this Category checkbox to use the category for threat intel submissions from the CSAP Member Portal. This allows members to use the category while submitting threat intel.
Select the Don't allow member to disable this category checkbox to restrict members from deactivating the category in the Member Portal.
Assign fields such as text boxes, single-select, multi-select, and custom fields to the category. When creating alerts from the Analyst Portal, the Additional section displays fields based on the category you choose.
Use the Enable/Disable toggle to use a field for the custom category.
Turn on the Mandatory toggle for the field to make them mandatory if this category is used while creating alerts.
Select the Visible to Members checkbox to display the field to recipients in the published alert.
Note
Ensure that the Active toggle is turned on to use the category while creating alerts.
After making the changes, click Create. The custom category is now available for use while creating alerts and submitting threat intel.