Copying from a Community

Overview

Groups can be copied from a Community to a default Organization in ThreatConnect^®. This action is similar to contributing a Group to a Community or Source, except that it creates a new Group in the default Organization (with associated Tags, Attributes, and Indicators, if desired) instead of creating a Group in a Community or Source. Any changes made to the newly copied Group will not affect the original Group.

A common use of this function is to work in a Group with organizationally defined Attributes, Tags, and Indicators. The Group can then be contributed to other Communities or shared with other Organizations.

Before You Start

Copying a Group to an Organization

1. Navigate to the legacy Details screen for a Group (Figure 1).

   

    

2. Click the Copy To My Org button. The Copy Data window will be displayed (Figure 2).
   Important

   For the Copy To My Org button to be displayed on the legacy Details screen, the Allow Data Copy checkbox must be selected when editing the options for the Community on the Communities/Sources tab of the Account Settings screen or on the Information tab of the Community Info screen. See the “Create a Community” section of ThreatConnect Account Administration Guide or the "Access the Community (or Source) Info Screen" of ThreatConnect Community and Source Administration Guide, respectively, for more information.

   

    

   • EXISTING GROUP: If merging with the copied Group with an existing Group in the Organization, select EXISTING GROUP and begin to enter the name of the existing Group in the Group Name text box, which will auto-populate with available possibilities after three characters have been entered.
   • NEW GROUP: If creating a new Group, select NEW GROUP. The name of the original Group will auto-populate in the Group Name text box. The name can be changed, if desired.
   • Click the Next button.
3. The Data screen will be displayed (Figure 3).

   

    

   • Copy Attributes?: Select Yes to copy the original Group's Attributes to the copied Group.
   • Include Tags?: Select Yes to associate all Tags from the original Group with the copied Group.
   • Create Tags That Don't Exist?: This option allows users to determine whether Tags associated with the original Group that do not already exist in the Organization will be created and associated with the copied Group or excluded from the copy operation. This option is available only if Yes is selected for Include Tags?. Select Yes to create any Tags that do not already exist in the Organization. Select No to include only Tags that already exist in the Organization.
   • Copy Associated Groups?: Select Yes to copy Groups associated to the original Group to the Organization and associate them to the copied Group. Select the checkbox for reach Group type to copy, or select the Select All checkbox to select all Group types. See Group Hierarchy and Association Directionality for more information about which Groups associated to associated Groups will be copied.
     Important

     The Task Group cannot be copied as an associated Group because this Group type may contain sensitive information and is specific to users in a given Organization.
   • Click the Next button.
4. The Security Labels screen will be displayed (Figure 4).

   

    

   • Exclude: By default, the Exclude option is selected. If this option remains selected, then the Choose Security Labels dropdown menu is used to select the Security Labels that will determine exclusion for associated Indicators, Groups, and Attributes, where objects with any of the selected Security Labels will be excluded.
   • Include: Selecting the Include option causes the Choose Security Labels dropdown menu to be used to select the Security Labels that will determine inclusion for associated Indicators, Groups, and Attributes, where objects with at least one of the selected Security Labels will be included.
   • Copy System-level Security Labels: By default, the Copy System-level Security Labels option is selected, which will cause only System-level Security Labels that are assigned to associated objects to be copied.
   • Choose Security Labels to apply to copied data: Selecting the Choose Security Labels to apply to copied data: option will display three dropdown menus (Figure 5). Use these menus to select Security Labels from the Organization to apply to the Group being copied and its associated objects.

     

      

   • Click the Next button.
5. The Save screen will be displayed (Figure 6).

   

    

   • Merge Hashes: If copying a Group with an associated File Indicator that exists in the Community and your Organization, select this checkbox to synchronize the file hashes between the two File Indicators. If you do not select this checkbox and the file hashes between the two Indicators are not synchronized, an error message will be displayed directing you to either correct the discrepancy manually (by canceling out of the Copy Data window, adding the missing file hash to the File Indicator in your Organization, and then restarting the copying process) or select the Merge Hashes checkbox to correct it automatically (by clicking the Back button, clicking the Next button on the Security Labels screen, and then selecting the Merge Hashes checkbox, which will no longer be grayed out). If the File Indicators contain mismatched hashes that cannot be merged, or if the File Indicator in the Community and the File Indicator in your Organization contain duplicated hashes, the copying process will fail and you will be prompted to correct the discrepancy manually.
   • Click the SAVE button to complete the copying process.

ThreatConnect^® is a registered trademark of ThreatConnect, Inc.

20032-01 v.08.C