Skip to main content

Cyware Threat Intelligence eXchange

Custom Objects

Custom Objects are custom STIX objects that provide additional context to any threat intel. Custom Objects characterize threat data components that are not described by STIX components. The application allows you to create custom objects that can be mapped with custom attributes and are used while creating custom intel packages in the application. Custom objects can be organization- or sector-specific. Some examples include Payment Card information, IMEI numbers, SIM Card number, and so on.

Create Custom Object

Custom Objects are included in STIX packages that are created in the CTIX application. Users can choose Custom Objects in the details submission form that allows the creation of custom STIX packages.

Before you Start

Your user group must have View and Update Configuration permissions.

Steps

  1. From the Administration icon, click Custom Entities Management.

  2. Go to the Custom Object tab and click Add Custom Object.

  3. Fill in the fields as follows:

    1. Title*. Enter a title for your custom object.

    2. Description. Enter a description that best describes the key details of a custom object.

    3. Search Custom Attributes*. Include any custom attributes or custom Indicators you want for the Custom Object. You can search the custom attributes created in the Custom Objects and Attributes module here. To create a custom attribute, refer to Creating Custom Attributes.

  4. Click Save.

Edit a Custom Object

To edit a custom object, do the following:

Before you Start

Your user group must have View and Update Configuration permissions.

Steps

  1. From the Custom Object list, click the object you want to edit.

  2. Make the desired changes to the object and click Save.