Adding the MITRE ATT&CK Source to Multiple Organizations
  • 01 Sep 2022
  • 1 Minute to read
  • Dark
    Light

Adding the MITRE ATT&CK Source to Multiple Organizations

  • Dark
    Light

Article Summary

The MITRE ATT&CKSource feed may be deployed in only one Organization on a ThreatConnect instance. Follow these steps to add the MITRE ATT&CK Source to other Organizations after it has been added to one Organization on an instance:

  1. Log into ThreatConnect with an Accounts Administrator, Organization Administrator, or System Administrator account.
  2. On the top navigation bar, hover the cursor over Settings A picture containing text, clipart, light  Description automatically generated and select Account Settings. The Organizations tab of the Account Settings screen will be displayed.
  3. Click the Communities/Sources tab. The Communities/Sources screen will be displayed (Figure 1).

    Graphical user interface, table  Description automatically generated

     

  4. Filter down to the MITRE ATT&CK Source by entering mitre into the search bar at the top left and then clicking SearchIcon  Description automatically generated or pressing the Enter key on your keyboard. The MITRE ATT&CK Source will be displayed in the results table (Figure 2).

    Graphical user interface, table  Description automatically generated

     

  5. Click Community Membership A picture containing text, furniture, table, seat  Description automatically generated in the Options column. The Community/Source Membership window will be displayed (Figure 3).

    Graphical user interface, application  Description automatically generated

     

    • Add All Organizations: Select this checkbox only if the MITRE ATT&CK Source is to be added to all Organizations on the ThreatConnect instance.
    • Organizations: Begin to enter the name of an Organization to which the MITRE ATT&CK Source is to be added. As characters are entered, a list will be displayed from which a single Organization or the option to ADD ALL ABOVE can be selected.
    • Default Role: Select the default Community role that all user accounts in the selected Organization(s) will be given in the Source.
    • Default API Role: Select the default Community role that all API accounts in the selected Organization(s) will be given in the Source.
    • Allow Data Copy: Select this checkbox so that data from the MITRE ATT&CK Source may be copied into the selected Organization(s).
    • Click the SAVE button.

The MITRE ATT&CK Source will now be displayed in the My Intel Sources selector for the selected Organization(s).


ThreatConnect® is a registered trademark of ThreatConnect, Inc.
MITRE ATT&CK™ is a trademark of The MITRE Corporation.

20119-06 v.03.A


Was this article helpful?