Skip to main content

Cyware Situational Awareness Platform

Manage Alerts

As a member, you can view and manage alerts in the Member Portal.

  • New Alerts: View newly published and unread alerts.

  • Bookmarked Alerts: View bookmarked or saved alerts to easily access them in the future.

  • Archived: View all alerts that are read by members. Alerts are automatically archived if Auto-Archiving is enabled.

Use the following filters to filter alerts:

  • Channels: Channels are a collection of alerts that are automatically categorized based on a selected Information source or recipient group. Channel alerts are targeted at recipients who consider alerts shared by particular information sources valuable or important. For example, finance-related alerts can be shared only with the relevant stakeholders.

  • Categories: Alert categories are separate classifications of cyber or non-cyber alerts published from the Analyst Portal. Designating alerts based on an alert category can aid in the organized distribution of useful information to appropriate users within the organization. Members can select a particular category in Settings and will receive alerts from those alert categories.

  • Traffic Light Protocol (TLP): TLP is used by analysts to indicate how widely the information can be circulated beyond the immediate recipient group. It improves the flow of information between individuals and groups in a controlled and trusted way.

  • Published Date: Filter alerts based on the date of publishing. You can choose between preset dates or choose specific dates.

  • Followed IRs: If the Intelligence Requirements (IRs) feature is enabled for you, you can filter alerts based on the IRs that you follow.

  • Source: Sources are various threat intelligence providers sharing real-time security feeds. You can select multiple sources to filter the alerts within the Network Advisories section. 

Recipient Groups

Members in Collaborate are categorized into different recipient groups to receive targeted alerts. There are three primary categories of recipient groups (RG) - Public Groups, Invite-only Groups, and System Groups. However, a single user may be included in multiple recipient groups. Additionally, an alert may be sent out to more than one recipient group.

For example, an alert based on a particular malware targeting the finance department of an organization may be tagged to the Finance & Accounts recipient group. Similarly, the best security practices alert can be sent to all recipient groups within an organization.

The following recipient groups are supported in Collaborate:

  • Public Groups are recipient groups that are made available to all Collaborate members for the purpose of receiving targeted alerts based on their role in the organization. You can be part of only one public group at a time, based on your preference. While onboarding Collaborate, you are given the option to select a public group. Later, you can switch to a different public group under the app settings in the Member Portal. Based on your product plan, public groups may be enabled by default.

  • Invite-only Groups are the recipient groups created by analysts to meet the functional requirements of your organization. Analysts can create multiple invite-only groups and you may be included in multiple invite-only groups. You can request to join these groups in Settings > General Settings > Recipient Groups.

  • System Groups are recipient groups that are available out of the box. Members of Collaborate are categorized into system recipient groups based on their roles. For example, all survey requests can be tagged to the Survey Managers system groups. However, member users in these groups can be modified.