Intel Approver Workflow
Threat intel submitted by members is reviewed and approved before it is published as an alert. The following image shows the intel approver workflow:
Use the following information to know more about the intel approval workflow:
When members submit threat intel for review, it is listed in Threat Intel in the Analyst Portal.
Intel Approvers can pick threat intel from the list and review. Intel can be reviewed by one approver at a time. If one approver is reviewing the intel, other approvers in the organization will not be able to review the same threat intel.
If the intel approver rejects the submitted threat intel, it will not be published to recipients.
If the intel approver reverts it back to the member for corrections, the members can resubmit it for review after making corrections.
If the intel approver finds all information in the threat intel to be correct and relevant, the intel can be published to other members as an alert.