Control Center
Manage features like the Tag Library, and allowed indicators in the Member Portal.
Allowed Indicators
Add the indicators such as IP, domain, URL, email, and hashes, that you consider safe, to your allowed list of indicators. Members can easily access all the allowed indicators which in turn allows them to manage all allowed indicators from a singular point. Users can also remove allowed indicators if they find them to be unknown or malicious.
Add Allowed Indicator
Add allowed indicators in CSAP Member Portal. These indicators will be parsed as allowed indicators while analysts create alerts. This enhances the information on safe indicators that can be shared in an alert and helps members make informed decisions.
Steps
To add indicators to the list of allowed indicators, do the following:
Navigate to Indicators Allowed from the main menu.
In Add Indicators, enter all the indicators. You can add indicators such as IPs, Domains, URLs, Emails, Hashes, etc. You can also add multiple indicators separated by commas.
Click Add. The indicator is now added to the allowed indicators.
Note
Indicators that are allowed are automatically identified and categorized when a publisher adds threat indicators to alerts that are published from CSAP Analyst Portal.
Manage Allowed Indicators
After adding allowed indicators, you can perform the following activities.
Navigate to the Indicators Allowed module from the main menu.
Use the filters to view the allowed indicators based on indicator type.
Click Add Indicators from the top corner of the module to add new allowed indicators.
Click Delete to delete an indicator. Members can delete indicators that they added in to the CSAP Member Portal.
Tag Library
Tags are text labels that you can assign to components such as situational awareness alerts, intel reports, Doc Library files, Knowledge Base documents, surveys, and more.
Tags help in identifying and classifying information. For example, use a tag OS to identify an alert that contains information on an operating system.
Tags are also useful as metadata and can be used to filter information based on a tag name in the member portal. For example, you can use the OS tag to filter out alerts that include some information about operating systems.
View Tags in the Member Portal
Tags created by analysts or members in various components such as alerts, Doc Library, intel reports, and so on are automatically added to the Tag Library. To view Tags Library in Member Portal, administrators must set Tags Library to Yes from Administration > Configuration > Features in the Analyst Portal. See Configure Collaborate Features.
To view tags in the Member Portal, navigate to Tag Library from the main menu.
Use filters to search for tags by their created date.
Click All Tags to view all tags created in . Tag type Analyst indicates that it is created by analysts and Member indicates that it is created by members.
Click My Tags to view the tags created by you.
Click My Organization Tags to view the tags created for your organization by the members. All the tags in My Tags are visible in My Organization Tags.
Click Analyst Tags to view tags created by analysts.
Click Member Tags to view tags created by members. For more details about tags, see Tag Library in the Analyst Portal.
Create Tag Groups in the Member Portal
A tag group is a collection of related tags. When you organize tags into groups, it is easier to manage and helps you use tags more efficiently. For example, a tag group called Malware can have tags such as Trojan, Spyware, Botnet, Adware and others. You can use tag groups while creating alert channels or uploading files in the Doc Library.
In the Tag Groups section in Tag Library, you can view the following types of tag groups:
My Tag Groups: Displays the tag groups created by you. You can edit your tag groups in this section. you cannot delete tag groups, but you can remove tags from tag groups in this section.
Member Tag Groups: Displays the tag groups created by other members.
Analyst Tag Groups: Displays the tag groups created by analysts in the Analyst Portal.
Steps
To create a tag group, follow these steps:
Go to Tag Library from the main menu.
Click Tag Groups and click Create in the upper-right corner.
Enter the name and description of the tag group.
Enter the tags you want to add to the tag group in the Tags field. You can add multiple tags by separating each tag with a comma or semicolon. If you are entering a new tag, it will automatically be added as a new tag after you select Add tags. You can add up to 15 tags to a tag group. To refine your search, you can use the following filter options:
Starts With: Shows tags that begin with your input.
Exact Match: Shows tags that exactly match your input.
Contains: Shows tags that contain your input anywhere within the tag name.
Review the details, and click Create. The tag group is created and is available in the My Tag Groups section.