Administer
Use the left navigation to navigate to the Administration module within Threat Intelligence Security Center. View the following modules of TISC data administration to set filtering rules, approval rules, define threat score, and manage notifications.
| Module | Description |
|---|---|
| Rules Engine | This section contains rules required for data management:1. Data Imports Approval Rules: Define the approval rules and integrate the approval flow within the Import Intelligence section after submitting the data import. 2. Inbound Filtering Rules: Create filter rules to filter the incoming source records data. 3. Threat Scoring Rule: Customize threat score calculator that assigns threat score to the observables. |
| Security Control Lists | This module helps you with the security controls:1. AllowList 2. DenyList 3. WatchList |
| Taxonomies | This module helps you to create taxonomies for the data source records. |
| Threat Lookup Reputation Calculator | Configures logic for calculating reputation scores of observables. |
| Outbound Intel Sharing | Manages sharing of threat intelligence with external systems. |
| Inbound Intel Sharing | Handles ingestion of threat intelligence from external sources. |
| TAXII Outbound Server | Configures TAXII server settings for sharing intelligence. |
| Notifications | Manages system notifications and alerts. |
| Reports | Provides reporting capabilities for threat intelligence data. |
| Webhooks Configuration | Configures webhook integrations for real-time data exchange. |
| Automation Flows | Defines automated workflows for threat intelligence processes. |
| Nodemap Controls | Describes how to create and manage report templates in both design-time and runtime experiences. |