Pivoting on Data
  • 24 Oct 2022
  • 2 Minutes to read
  • Dark
    Light

Pivoting on Data

  • Dark
    Light

Minimum Role: Organization role of Read Only User

Prerequisites: An Indicator, Group, Tag, or Attribute

Overview

Pivoting is an analytic transition in which a user in ThreatConnect® moves from one entity—Indicators and Groups in the ThreatConnect Data Model, as well as Tags and Attributes—to an associated entity as defined by the Diamond Model. Through pivoting, users can explore relationships and find correlations between entities in a contiguous manner.

Pivoting from an Indicator or Group

  1. On the top navigation bar, hover the cursor over Browse and select Indicators, Groups, or a specific Indicator or Group type. The Browse screen will display a results table containing objects of the selected type.
  2. Click on an entry to display its Details drawer (Figure 1).

    Graphical user interface, application  Description automatically generated

     

  3. Click the vertical ellipsisat the upper-right corner of the drawer and select Pivot. The Browse screen will display all Groups associated with the selected Indicator, and the Indicator will be displayed in a gray rectangle above the results table (Figure 2). If a Group type was selected in Step 1, selecting Pivot in a Group’s Details drawer will display all associated Indicators on the Browse screen.Graphical user interface, application  Description automatically generated

     

Note
The same pivoting operation can also be performed by navigating to the Overview tab of the Details screen for the object and then clicking the Pivot button at the top left of the screen. For instructions on accessing an object’s Details screen, see the “Viewing the Details Screen” section of The Details Screen.

Pivoting from a Tag

  1. On the top navigation bar, hover the cursor over Browse and select Tags to display a results table.
  2. Click on an entry to display its Details drawer.
  3. Click the vertical ellipsisat the upper-right corner of the drawer and select Pivot.
  4. After selecting Pivot, select whether to pivot on Indicators or Groups (Figure 3). The Browse screen will display a results table containing Indicators or Groups to which the selected Tag is applied. The selected Tag will be displayed in a gray rectangle above the results table.

    Graphical user interface, text, application, email  Description automatically generated

     

Pivoting on an Attribute

  1. Navigate to the Details screen for an Indicator or Group. For instructions on accessing an object’s Details screen, see the “Viewing the Details Screen” section of The Details Screen.
  2. Scroll down to view the Attributes card on the left side of the screen (Figure 4).

    Graphical user interface, text, application, email  Description automatically generated

     

  3. Click PivotIcon  Description automatically generatedto the right of an Attribute to pivot on it. The Browse screen will be displayed, showing all objects with the selected Attribute. This Attribute will be displayed in a gray rectangle above the results table.
    Note
    The PivotIcon  Description automatically generatedicon will be displayed only for Attributes with a maximum length of 500 characters or less.

ThreatConnect® is a registered trademark of ThreatConnect, Inc.

20034-01 v.07.C


Was this article helpful?