Fill Identity Details
Identities can represent actual individuals, organizations, or groups (e.g., ACME, Inc.) as well as classes of individuals, organizations, or groups (e.g., the finance sector). The Identity threat data object can capture basic identifying information, contact information, and the sectors that the identity belongs to. Identity is used in STIX to represent targets of attacks, information sources, object creators, and threat actor identities.
Add the following details for identity:
Basic Details
Common Fields
Custom Attributes
External References
Basic Details
Field Name | Required | Description |
|---|---|---|
Name | Mandatory | Specify the name of the identity. |
Description | Optional | Specify the additional information such as purpose and key characteristics about the identity. |
Roles | Optional | Specify the list of roles an identity can perform, such as CEO, Domain Administrator, Doctor, and more. |
Identity Class | Optional | Specify the type of entity that this identity describes, such as an individual or organization. |
Sectors | Mandatory | Specify the list of industry sectors to which the identity belongs, such as education, agriculture, aerospace, network security, and more. |
Contact Information | Optional | Specify the contact details, such as email address, phone number, and more for the identity. |
Common Fields
Field Name | Description |
|---|---|
Tags | Specify the tags for the identity. |
TLP | Specify the TLP of the identity, such as RED, AMBER, GREEN, WHITE, and NONE. |
Created by Reference | Specify the entity that created the CTIX object. |
Revoked | Select this option to mark the component as revoked or invalid. |
Custom Attributes
Field Name | Description |
|---|---|
Add Custom Attributes | Specify the additional information that helps in improving the threat intelligence details. CTIX displays custom attributes created in Administration > Custom Entities Management. You can create multiple custom attributes for the identity. |
External References
Use external references to include any non-STIX information that you may want to associate with this object.
Field Name | Description |
|---|---|
Source Name | Enter a source name. |
Description | Enter a description. |
External ID | Enter an external ID. |
URL | Enter the URL of the external reference. |
Hash Type | Select the hash type. |
Hash Value | Enter the hash value. |