Global Notes
Notes contain additional information that the analysts want to share with internal teams and tenants. Using notes, you can share indicators, threat intel data, threat data details, actionable tasks, or any other details. Since the global notes are accessible to everyone, it eliminates the need to send out email alerts.
The Global Notes module shows an overview of all the notes created by all the analysts under All Notes and your personal notes under My Notes. The Global Notes dashboard includes information, such as the created date and time, the module from which the note was created, and the creator of the note. You can also open the module inside which the note was created and search for the notes.
For example, an IP address has relations with multiple malicious threat data objects, so to inform the same to anyone who comes across or uses that IP address, you can create a note with the required information attached to the IP address.
You can do the following in Global Notes:
Besides Global Notes, you can create notes from the following modules:
Threat Data
Threat Mailbox
RSS Feeds
Twitter Feeds
Threat Investigations
ATT&CK Navigator
If you delete the threat data object, feed source, email address, or more on which the note is created, those notes will also get deleted.