Create Custom Alert Categories
You can create custom categories based on your organization's requirements to categorize alert information. For example, you can create a Zero-day Vulnerability category to share zero-day vulnerability advisories. Admins can map fields such as text boxes, single-select, multi-select, and custom fields to categories. When creating alerts and submitting threat intel, the Additional section displays fields based on the category selected for the alert. Create custom categories and assign fields to allow alert creators to add additional information to the alert. You can create a maximum of 100 custom categories.
Before you Start
Ensure that you have the View, Create, and Update permissions for categories.
Steps
To create a new custom category, follow these steps:
Sign in to the Analyst Portal and go to Administration > Settings.
Click Core Settings > Category > Custom Categories.
To create a custom category, click Create. Use the following information to enter the details:
Enter a name for the category in 100 characters. For example, Critical Vulnerability.
Select a color label for the category. The color is used to identify the category in the Member Portal.
Enter a description to communicate the purpose of the category in 1000 characters. For example, This category is used to share Zero-day vulnerability advisories.
Select an image for the category. The default category image is the image configured in Settings > Theme Settings > Logo Management. The selected image is automatically added to the alert when the category is used.
Select the Allow members to submit Threat Intel in this Category checkbox to use the category for threat intel submissions from the Collaborate Member Portal. This allows members to use the category while submitting threat intel.
Select the Don't allow member to disable this category checkbox to restrict members from deactivating the category in the Member Portal.
Assign fields such as text boxes, single-select, multi-select, and custom fields to the category. When creating alerts from the Analyst Portal, the Additional section displays fields based on the category you choose.
Use the Enable/Disable toggle to use a field for the custom category.
Turn on the Mandatory toggle for the field to make it mandatory if this category is used while creating alerts.
Select the Visible to Members checkbox to display the field to recipients in the published alert.
Note
Ensure that the Active toggle is turned on to use the category while creating alerts.
After making the changes, click Create. The custom category is now available for use while creating alerts and submitting threat intel.