Fill Infrastructure Details
Infrastructure refers to the physical components of interrelated systems providing commodities and services essential to enable, sustain, or enhance societal living conditions. Infrastructure can be fundamental facilities and systems serving a country, city, or other areas, including the services and facilities necessary for its economy to function. Infrastructure can also comprise public and private physical improvements such as roads, railways, bridges, tunnels, water supply, sewers, electrical grids, and telecommunications (including Internet connectivity and broadband speeds).
The infrastructure component contains the following:
Basic Details
Common Fields
Custom Attributes
Kill Chain Phases
External References
Basic Details
Field Name | Required | Description |
|---|---|---|
Name | Mandatory | Specify the name for the infrastructure. |
Description | Optional | Specify the additional information such as the purpose and key characteristics of the infrastructure. |
Infrastructure Types | Optional | Specify the type of infrastructure, such as amplification, anonymization, botnet, reconnaissance, and more. |
Aliases | Optional | Specify the alternate names for the infrastructure. |
Start Date* | Mandatory | Specify the date on which the infrastructure was first seen. |
Last Date* | Mandatory | Specify the date on which the infrastructure was last seen. |
*For more information about dates, see General FAQs.
Common Fields
Field Name | Description |
|---|---|
Tags | Specify the tags for the infrastructure. |
TLP | Specify the TLP, such as RED, AMBER, GREEN, WHITE, and NONE for the infrastructure. |
Created by Reference | Specify the entity that created the CTIX object. |
Revoked | Select this option to mark the component as revoked or invalid. |
Custom Attributes
Field Name | Description |
|---|---|
Add Custom Attributes | Specify the additional information that helps in improving the threat intelligence details. CTIX displays custom attributes created in Administration > Custom Entities Management. You can create multiple custom attributes for the infrastructure. |
Kill Chain Phases
Include the kill chain phases for which this object can be used.
Field Name | Description |
Kill Chain Name | Choose the kill chain name to associate with this object. You can choose Lockheed Martin or MITRE kill chains. You can also create and add custom kill chains in Administration > Custom Entities Management and associate them here. |
Kill Chain Phase | Choose the kill chain phase associated with the kill chain. |
External References
Use external references to include any non-STIX information that you may want to associate with this object.
Field Name | Description |
|---|---|
Source Name | Enter a source name. |
Description | Enter a description. |
External ID | Enter an external ID. |
URL | Enter the URL of the external reference. |
Hash Type | Select the hash type. |
Hash Value | Enter the hash value. |