Skip to main content

Cyware Situational Awareness Platform

Add Attachments to the Alert

Add attachments to enhance alert information and add credibility to the alert. Analysts can add attachments from the Doc Library or upload files from their computer to the alert. You can attach up to 20 files to an alert.

Before you Start 

  • Select the TLP for the alert.

  • Add recipient groups to the alert.

Steps 

To add attachments while creating alerts, do the following:

  1. In the alert creation form, click Attachments.

  2. Add attachments to the alert by selecting files from the Doc Library, or uploading files from your computer to the Doc Library.

    • Select Files from Computer: Click Upload to upload files from your computer.  The file name can only have alphanumeric characters and () { } [ ] - _ +. The maximum file size is 100 MB. Some of the supported formats are .pdf, .txt, .doc, and other formats. To learn more about all supported formats, hover over the information icon. 

      You can modify the file name, provide a description, and add tags to the file while adding it to the Doc Library. The uploaded file is added to the Doc Library. By default, the file is saved in the root directory of the Doc Library. You can change this path and save the file by clicking Change Upload Path. 

    • Doc Library: Click Browse to attach files directly from the Doc Library. You can sort the files in the Doc Library by their last updated date. To know more about this, see Upload Files to the Doc Library.

  3. Select the checkbox for Send as Email Attachments to share the attachments with recipients in the email alert.

    Note

    If member intel submissions contain attachments, analysts can automatically extract IOCs from the attachments using Extract Indicators. The extracted IOCs are added to the Indicators section, where analysts can verify, and parse them as allowed and blocked indicators. The supported indicator types include SHA256, domain, SHA1, URL, IP address, email, MD5, IPv4, IPv6, and CIDR.

  4. After adding attachments, the next step is to attach Intelligence Requirements (IRs). To know more about this, see Attach Intelligence Requirements.