View Threat Intel Details
To view the threat intel details and manage an indicator, click the title of the indicator on the Threat Intel listing page. The indicator details page displays the following details:
On the left panel:
Summary: Displays the list of incidents, malware, vulnerabilities, and threat actors under various tabs.
Notes: Displays the list of notes that are added by various CFTR users who have access to the indicator.
Activity Logs: Displays the timeline of various updates to the indicator and the update details.
Actions: Displays the list of actions that are configured for the indicator.
Terminal: Displays the terminal tool interface.
Intel Enrichment: Displays the tabs for various intel enrichment apps that are configured on the Orchestrate application.
On the right panel:
Overview: Displays the basic details of an indicator, such as type, first-sighted and last-updated details, TLP, and labels.
Notes: Displays the list of notes that are added by various CFTR users.