Skip to main content

Cyware Threat Intelligence eXchange

Update Custom Scores Using Rules

You can configure rules to update the custom score values of objects.

Before you Start 

The custom score to be updated must be enabled in Administration > Configurations > Custom Scores.

Steps 

To configure a rule to update the custom score values of objects, follow these steps:

  1. Go to  Main Menu > Actions > Rules.

  2. Click New Rule.

  3. Enter a rule name within 100 characters and click Submit.

  4. In Source, select the sources and collections from which you want to retrieve objects.

  5. In Condition, enter the following details:

    • Intent Type: Select the object type to be updated.

    • Rule Type: Select a rule type to apply specific conditions related to a custom score.

    • Select Object for Actioning: Select this option to perform the action of a rule on the selected object. This option ensures that the action is performed only on the selected object when you define multiple conditions with multiple objects.

  6. In Actions, enter the following details:

    1. Actions: Select the Update Custom Score action.

    2. Application: Select the CTIX application.

    3. Account: Select the default account.

    4. Custom Scores: Select custom score to be updated.

    5. Value: Enter the value of the custom score to be updated in the objects.

  7. Set the global conditions from Additional Actions. For more information, see Additional Actions for Rules.

  8. Click Save.

When you run the rule, the custom score value will be updated in the objects you have selected in the rule.