Setting Indicator Threat and Confidence Ratings
  • 19 Oct 2022
  • 1 Minute to read
  • Dark
    Light

Setting Indicator Threat and Confidence Ratings

  • Dark
    Light

Minimum Role: Organization role of Standard User

Prerequisites: An Indicator that has been created

Overview

ThreatConnect® allows you to set an Indicator’s Threat Rating and its associated Confidence Rating. The Threat Rating identifies how much of a threat an Indicator represents, and it is measured on a scale of 0–5 skulls, where a higher rating represents a higher threat. The Confidence Rating is an expression of how confident an owner is that its Threat Rating assessment is accurate, and it is measured on a scale of 0–100. These two rankings are important because they allow users to focus on Indicators that represent the most active and relevant threats to their networks. See Evilness Rating: Skulls Scale for Cyber Threats and Best Practices: Indicator Rating and Confidence for guidelines on assigning Threat Ratings and Confidence Ratings.

Setting Threat and Confidence Rating

Navigate to an Indicator’s Details screen. For instructions on accessing an object’s Details screen, see the “Viewing the Details Screen” section of The Details Screen.

Scroll down to the Details card on the right side of the screen (Figure 1).

Graphical user interface, text, application, chat or text message  Description automatically generated

 

  • Overall Threat Rating: Select a skull Icon  Description automatically generated to set the Indicator’s Threat Rating. To remove an Indicator’s Threat Rating, click the Icon  Description automatically generated icon.
  • Overall Confidence Rating: Drag the slider to set the Indicator’s Confidence Rating.
Note
Changes to an Indicator’s Threat and Confidence Ratings are saved automatically.

ThreatConnect® is a registered trademark of ThreatConnect, Inc.

20022-01 v.08.C


Was this article helpful?