Adding Group Data to a Report

Group Data sections display data from a selected Group in an owner to which you have access. When adding a Group Data section to a report, you must first select the Group whose data you want to add to the report. After you select a Group, you can select which Group Data section to add to the report and customize it as desired.

Selecting a Group

Selecting Group Data in the Intelligence Data section of the Add Section drawer will display the Add Group Data menu. If creating a report from a Group, the Group will be selected from the Group dropdown automatically and a list of Group Data sections you can add to the report will be displayed (Figure 1).

If creating a report from a Case or the Reporting screen, you must first select View All Groups… from the Group dropdown to display the Select a Group window (Figure 2). This window displays all Groups in the owners to which you have access.

• Select the Group whose data you want to add to the report.
• To filter Groups by type, creation date, last modified date, and, if cross-owner associations are enabled, owner, use the Filtersmenu; to filter Groups by summary, use the search bar.
• Click the Select Group button. The Add Group Data menu will be displayed, showing the selected Group in the Group dropdown and a list of Group Data sections you can add to the report (Figure 1).

Group Data Sections

From the Add Group Data menu (Figure 1), you can add any of the following Group Data section(s) to a report:

• Details
• Attributes
• Group Associations
• Indicator Associations
• Victim Assets Associations

A Group Data section can display data from a single Group; however, you can return to the Add Section drawer to add multiple Group Data sections containing data from multiple Groups to a single report.

Details

The Details section can be used to display basic information about the selected Group. To add this section to a report, select Details from the Add Group Data menu (Figure 1). The Add Details menu will be displayed (Figure 3).

• Details: To include all available Group data options in the Details section, select the Select All checkbox; otherwise, select the checkbox for each Group data option you want to include in the Details section. Available Group data options include the following:
  • Name: The Group’s name.
  • Type: The Group’s type.
  • Owner: The Organization, Community, or Source to which the Group belongs.
  • Security Label: The Security Label(s) applied to the Group.
  • Date Added: The date and time when the Group was created.
  • Last Modified: The date and time when the Group was last modified.
  • Tags: The Tag(s) applied to the Group.
• Section Preview: This section displays a preview of the Details section that will be added to the report.
• Click the Add button to add a section to the report for each selected Attribute.

Attributes

The Attributes section can be used to display the following information about Attributes added to the selected Group:

• The Attribute’s type
• Security Labels applied to the Attribute
• The Attribute’s source
• The date when the Attribute was created
• The date when the Attribute was last modified
• The Attribute’s value (including tables and images added to its value)

To add this section to a report, select Attributes from the Add Group Data menu (Figure 1). The Add Attributes menu will be displayed (Figure 4).

• Select the checkbox for each Attribute to add to the report. To select all Attributes, including those displayed on other pages in the table, select the checkbox in the table’s header.
  Note

  If you select Attributes on multiple pages in the table, they will all be added to the report.
• To filter Attributes by Attribute Type, creation date, or last modified date, use the Filtersmenu; to filter Attributes by value, use the search bar.
• : Click this icon to display a preview of the Attributes section that will be added to the report for the Attribute.
• Click the Add button to add the section to the report.

Group Associations

The Group Associations section can be used to display information about Groups associated to the selected Group in a tabular format. To add this section to a report, select Group Associations from the Add Group Data menu (Figure 1). The Add Group Associations menu will be displayed (Figure 5).

• Filters: By default, Groups of all types belonging to any owner to which you have access will be displayed in the Group Associations table. If desired, use the following options in this section to filter associated Groups displayed in the table:
  • Type: Select one or more Group types. Only Groups of the selected type(s) will be displayed in the table.
  • Owner: Select one or more owners. Only Groups that belong to the selected owner(s) will be displayed in the table.
  • Date Added: Click the from and to fields and use the date selectors to select the beginning and end of a date range, respectively. Only Groups that were created within the specified range will be displayed in the table.
  • Last Modified: Click the from and to fields and use the date selectors to select the beginning and end of a date range, respectively. Only Groups that were last modified within the specified range will be displayed in the table.
• Table Settings: Use the following options in this section to customize the display settings for the Group Associations table:
  • Table Columns: By default, all available table columns will be displayed in the  table. To prevent a table column from being displayed in the table, clear the checkbox corresponding to its name.
  • Table Cutoff: Enter the maximum number of associated Groups to display in the table. The minimum value you can enter is 5, and the maximum value you can enter is 20.
  • Sort By: Select the table column by which to sort associated Groups in the table. You can sort associated Groups by any table column, including those not displayed in the table.
  • Ascending/Descending: Select whether to sort associated Groups in ascending or descending order. The sort order will correspond to the column by which the table is sorted.
• Section Preview: This section displays a preview of the Group Associations table that will be added to the report.
• Click the Add button to add the section to the report.

Indicator Associations

The Indicator Associations section can be used to display information about Indicators associated to the selected Group in a tabular format. To add this section to a report, select Indicator Associations from the Add Group Data menu (Figure 1). The Add Indicator Associations menu will be displayed (Figure 6).

• Filters: By default, Indicators of all types belonging to any owner to which you have access will be displayed in the Indicator Associations table. If desired, use the following options to filter associated Indicators displayed in the table:
  • Type: Select one or more Indicator types. Only Indicators of the selected type(s) will be displayed in the table.
  • Owner: Select one or more owners. Only Indicators that belong to the selected owner(s) will be displayed in the table.
  • Date Added: Click the from and to fields and use the date selectors to select the beginning and end of a date range, respectively. Only Indicators that were created within the specified range will be displayed in the table.
  • Last Modified: Click the from and to fields and use the date selectors to select the beginning and end of a date range, respectively. Only Indicators that were last modified within the specified range will be displayed in the table.
• Table Settings: Use the following options in this section to customize the display settings for the Indicator Associations table:
  • Table Columns: By default, all available table columns will be displayed in the table. To prevent a table column from being displayed in the table, clear the checkbox corresponding to its name.
  • Table Cutoff: Enter the maximum number of associated Indicators to display in the table. The minimum value you can enter is 5, and the maximum value you can enter is 20.
  • Sort By: Select the table column by which to sort associated Indicators in the table. You can sort associated Indicators by any table column, including those not displayed in the table.
  • Ascending/Descending: Select whether to sort associated Indicators in ascending or descending order. The sort order will correspond to the column by which the table is sorted.
• Section Preview: This section displays a preview of the Indicator Associations table that will be added to the report.
• Click the Add button to add the section to the report.

Victim Assets Associations

The Victim Assets Associations section can be used to display information about Victim Assets associated to the selected Group in a tabular format. To add this section to a report, select Victim Assets Associations from the Add Group Data menu (Figure 1). The Add Victim Assets Associations menu will be displayed (Figure 7).

• Type: By default, Victim Assets of all types will be displayed in the Victim Assets Associations table. If desired, select one or more Victim Asset types. Only associated Victim Assets of the selected type(s) will be displayed in the table.
• Table Settings: Use the following options in this section to customize the display settings for the Victim Asset Associations table:
  • Table Columns: By default, all available table columns will be displayed in the table. To prevent a table column from being displayed in the table, clear the checkbox corresponding to its name.
  • Table Cutoff: Enter the maximum number of associated Victim Assets to display in the table. The minimum value you can enter is 5, and the maximum value you can enter is 20.
  • Sort By: Select the table column by which to sort associated Victim Assets in the table. You can sort associated Victim Assets by any table column, including those you chose not to display in the table.
  • Ascending/Descending: Select whether to sort associated Victim Assets in ascending or descending order. The sort order will correspond to the column by which the table is sorted.
• Section Preview: This section displays a preview of the Victim Assets Associations table that will be added to the report.
• Click the Add button to add the section to the report.

ThreatConnect^® is a registered trademark of ThreatConnect, Inc.

20144-12 v.02.A