Skip to main content

Cyware Threat Intelligence eXchange

Create Intel from Threat Investigations

You can create intel from your canvas. This capability allows you to upload a large amount of intel to the Intel Exchange platform. You can easily create and add intel that does not exist in your system with the bare minimum information. Additionally, you can also draw object relations easily on the canvas using your mouse. 

To create intel from Threat Investigation, follow these steps:

  1. From your canvas list, select a canvas.

  2. Click the vertical ellipsis to view options.

  3. Select Create Intel in CTIX to create and store the intel in the Intel Exchange platform that can be used for internal consumption.

    Note

    • You can create intel from a modified canvas without permission to save it, as long as you have the Create Intel permission.

    • Intel creation supports up to 50,000 nodes per canvas.

    Packages created in Threat Investigations by selecting Create intel in CTIX are stored in a Intel Exchange internal collection called Threat Investigation.