Add Allowed Indicator
Add allowed indicators in CSAP Member Portal. These indicators will be parsed as allowed indicators while analysts create alerts. This enhances the information on safe indicators that can be shared in an alert and helps members make informed decisions.
Steps
To add indicators to the list of allowed indicators, do the following:
Navigate to Indicators Allowed from the main menu.
In Add Indicators, enter all the indicators. You can add indicators such as IPs, Domains, URLs, Emails, Hashes, etc. You can also add multiple indicators separated by commas.
Click Add. The indicator is now added to the allowed indicators.
Note
Indicators that are allowed are automatically identified and categorized when a publisher adds threat indicators to alerts that are published from CSAP Analyst Portal.