Submit an Intelligence Requirement
As a member, you can submit an Intelligence Requirement to address specific cybersecurity challenges and potential threats faced by your organization.
Steps
To submit an Intelligence Requirement, do the following:
Sign in to the Member Portal.
Navigate to Intelligence Requirements from the sidebar, and click My IRs. You can view all the IRs that you have submitted here.
Click Submit IR in the upper-right corner. Use the following information while submitting an IR:
Title: Enter the IR title. For example, Phishing Campaign Targeting Employee Email Accounts.
Description: Enter a detailed description for the IR.
TLP: Select the TLP associated with the IR. The default TLP is AMBER. For more information about TLPs, see TLP Controls.
IR Type: Select the IR type to define the scope and focus of the IR. The types are GIR, PIR, and SIR. The default IR Type is General Intelligence Requirement (GIR).
Priority: Select the priority of the IR. The options are High, Medium, and Low. The default priority is Medium.
Category: Select the IR category. The category helps classify the intelligence requirements into relevant domains. These categories are pre-configured in the Analyst Portal.
Sub-category (optional): Select the sub-category associated with the previously selected IR category.
Tags: Enter the tags that are associated with the IR. Tags play important in IRs because you can view alerts based on similar tags in the IR. Examples of tags are Phishing, Email Security, Social Engineering, and Data Breaches.
End Date: Enter the end date to close the IR. After the end date, you no longer receive alerts for the IR. By default, the end date is set to three months from the day of submission. The minimum end date that you can set is 24 hours from the time of submission.
Attachments (optional): Upload up to 10 files to an IR to give additional context to the IR. Each file can be of a maximum size of 10 MB.
Note
To save an IR as a draft, ensure you have entered the title because it is a mandatory field. You can find all your drafted IRs in My IRs.
Click Submit to submit the IR. After you submit an IR, the analyst reviews it in the Analyst Portal and it is published by the analyst. After the IR is published, it is available in the IR Repo, where other members can follow the IR. By default, you are following the IR if it was submitted by you and published by analysts.