Configure TDL
As an analyst, you can configure the Threat Defender Library (TDL) settings for members.
Before you Start
Ensure that TDL is enabled for your tenant. For more information, contact Collaborate support.
Ensure you have View and Update permissions for Configurations in Roles and Permissions.
Steps
Sign in to the Analyst Portal.
Go to Administration > Configuration.
Click Edit for the required section.
To automatically publish open-source threat defender content in OSINT Repo, turn on the Auto Deliver Threat Defender OSINT Content toggle in Configurations > Analyst Dashboard. You can specify the recipient groups who will receive open-source content in the OSINT Repo. By default, no recipient groups are specified.
To add a peer review step that allows members to review the TDL content of their peers before it undergoes analyst review, turn on the Content Review by Peer Members in Threat Defender Library toggle in Member Submissions.
To ensure that TDL is linked to the ATT&CK Navigator, turn on the ATT&CK Navigator in Features. This enables TDL Heat Map in the ATT&CK Navigator for both Analyst and Member Portals. If TDL is enabled, the TDL Heat Map will continue to be available even if this configuration is switched off.
After configuring the settings, click Save. The changes will be available in the Member Portal.