Cyware Threat Intelligence eXchange

Inactivity Timeout: Set a period of time you can be inactive without interacting with the system. After this set time period, the application will log you out and you will have to log in again.

Lock Users upon Failed Login: Set the number of times a user can try to log in to the application before getting locked out. You can define to permanently or temporarily lock out the user.

Automatic Account Deactivation: Set the time interval after which a user account will automatically get deactivated due to inactivity in the application. For example, if a user account has not logged in to the application for over 30 days, CTIX will deactivate that account.

Concurrent Session: Enables you to use the application on two systems or browsers at the same time by the same user account.

Login Session Timeout: Specify a time limit that you can be logged into a session on the CTIX application. You are logged out of the CTIX application automatically after this time period. This time limit only applies to users added after this configuration is set up.

Google Recaptcha: Google reCAPTCHA helps detect abusive traffic and stops bots from accessing the CTIX application without user interaction. You can use this option to enable Google reCAPTCHA for users at the login screen of the application.

Max Polling Time: Set the time interval when the CTIX tenant automatically retrieves Threat Intel from the configured Sources.

Data Marking Preference: Set the data marking preference to define the access control mechanism for threat data objects in the platform. Traffic Light Protocol (TLP) is the default data marking preference and cannot be disabled. Turn on the ACS toggle to enable the marking of threat data objects as per Access Control Specification (ACS).

Email Connection Retry Count: Specify the number of times the application attempts to connect to the configured Threat Mailbox.

Email Connection Retry Interval: Set the time interval at which the application will attempt to retry connecting to the configured Threat Mailbox.

Max Feed Channels Polled: Set the number of API feeds that can concurrently poll data at the same time. You can set the value to a maximum of eight feeds to concurrently poll data.

Parse Domain: Automatically parses the domain values from URLs and emails from the configured Threat Mailbox and RSS feeds.

Parse Email from URL: Automatically parses the emails from URLs from the configured Threat Mailbox and RSS feeds.

Import Intel Preference: To set your preference to import intel, select one of the following:

AI Assist: Enable users to get AI assistance in threat investigation operations, such as advanced parsing and extraction of threat data, reporting, and more.

IOC Enrichment Validity: Specify a time period after which the application can re-enrich a threat data object. Setting this configuration allows you to conserve quota and prevent duplicate enrichment. This helps in the calculation of the confidence score.