Skip to main content

Cyware Threat Intelligence eXchange

Add a New Source

You can add an RSS source to receive the latest threat intel. You can also add an RSS source from Administration > Integration Management > RSS.

To add a new source, do the following:

  1. From Main Menu, open RSS Feeds under Collection.

  2. Click Add New Source.

  3. Enter a unique name to identify the RSS feed source.

  4. Enter the feed URL for the appropriate source website.

    You can obtain the website URL if the feed subscription feature is available for the website.

  5. To set default metadata values for TLP, confidence score, tags, and custom scores to the report object while creating intel, select Assign Default Metadata to Report.

    • To assign the default metadata to all objects while creating intel, select Apply Default Metadata to all objects.

  6. To automatically create intel for the received feeds, select Create intel automatically.

  7. To parse IOCs from the feed description, select Parse IOCs only from visible content.

    HTML tags are not considered for parsing.

  8. To validate a source URL for a trusted CA certificate or a self-signed SSL certificate, select Verify SSL.

    By default, this check box is selected.

  9. Click Add.