Create a Threat Bulletin
Create your own customized threat bulletins in CTIX and include your organization-specific information. CTIX provides you with a WYSIWYG editor to create content that is informative as well as visually appealing. Use the following options in the bulletin editor to create content for your threat bulletin.
Include threat data objects present in CTIX
Include CTIX Threat investigations canvas
Include MITRE ATT&CK Navigator matrix
Create tables to include content
Add Attachments
Before you Start
You must have Create Threat Bulletin permission to create a threat bulletin.
Steps
To add a threat bulletin:
Navigate to the Main Menu and select Threat Bulletin.
Click Add Threat Bulletin.
Enter a title for your bulletin, select a TLP, and click Add.
Use the threat bulletin WYSIWYG editor to enter information for the bulletin.
Use one of the following options to format and present your content.
You can choose to add pictures, add tables, and include links.
You can choose to upload files or add tables.
Click Add Tag to associate a tag to your threat bulletin.
Choose a TLP value to associate with your threat bulletin.
To include attachments in your bulletin, click Upload File. Browse and select a file less than 10 MB.
To include threat data objects in your bulletin, click Add Object.
Write a CQL query to list threat data objects and click Continue. See CQL query reference and Get Started with CQL.
To include the MITRE ATT&CK Navigator matrix, click Add MITRE.
Select the required tactics and techniques to highlight in the Threat Bulletin. However, you cannot select sub-techniques to highlight in a bulletin.
Click Add Filters to apply filters to the ATT&CK Navigator matrix.
Click Show Selected to see only the selected rows and click Continue.
To include a threat investigation canvas in your bulletin, click Add Investigation. Select a canvas name from the list and click Continue.
Click Save.