Cyware Threat Intelligence eXchange

Data Marking Preference: Set the data marking preference to define the access control mechanism for threat data objects. For more information, see Configure Data Marking Preference.

Inactivity Timeout: Set a period you can be inactive without interacting with the system. After this set period, the application will log you out and you will have to sign in again.

Lock Users upon Failed Login: Set the number of times a user can try to log in to the application before getting locked out. You can define to permanently or temporarily lock out the user.

Automatic Account Deactivation: Set the time interval after which a user account will automatically get deactivated due to inactivity in the application. For example, if a user account has not logged in to the application for over 30 days, Intel Exchange will deactivate that account.

Concurrent Session: Enables you to use the application on two systems or browsers simultaneously by the same user account.

Login Session Timeout: Specify a time limit for your session login in Intel Exchange application. You are automatically logged out of the Intel Exchange application after the specified time limit. This time limit is only applicable to users who are added after this configuration is set up.

Google Recaptcha: Google reCAPTCHA helps detect abusive traffic and stops bots from accessing the CTIX application without user interaction. You can use this option to enable Google reCAPTCHA for users at the login page of the application.

Max Polling Time: Set the time interval when the CTIX tenant automatically retrieves Threat Intel from the configured Sources.

Max Poll Result Size: Set the maximum number of packages that can be received from a source for an API call.

Email Connection Retry Count: Specify the number of times the application attempts to connect to the configured Threat Mailbox.

Email Connection Retry Interval: Set the time interval at which the application will attempt to retry connecting to the configured Threat Mailbox. 

Max Feed Channels Polled: Set the number of API feeds that can concurrently poll data at the same time. You can set the value to a maximum of eight feeds to concurrently poll data. 

Parse Domain: Turn on the URL or Email toggle to automatically parse the domain values from URLs and emails from the configured Threat Mailbox and RSS feeds.

Parse Email from URL: Turn on the URL to automatically parse the emails from URLs from the configured Threat Mailbox and RSS feeds.

Import Intel Preference: To set your preference to import intel in Intel Exchange, select one of the following:

IOC Enrichment Validity: Specify a period either on an hourly basis or a daily basis after which the application can re-enrich a threat data object. Setting this configuration allows you to conserve quota and prevent duplicate enrichment. This helps in the calculation of the confidence score. You can day basis or hour basis as well. 

AI Assist: Enable users to get AI assistance in threat investigation operations, such as advanced parsing and extraction of threat data, reporting, and more.