Add Allowed Indicators
Add allowed indicators in CSAP Analyst Portal. These indicators will be parsed as allowed indicators while creating alerts. This enhances the information on safe indicators that can be shared in an alert and helps members make informed decisions.
Navigate to Indicators Allowed from the main menu.
Click Add Indicators to add new indicators.
Enter all the indicators. You can add indicators such as IPs, Domains, URLs, Emails, Hashes, etc. Users can also add multiple indicators separated by commas.
Click Add .
Note
Indicators that are allowed are automatically identified and categorized when publishers add threat indicators to alerts that are published from the CSAP Analyst Portal.