Setting Indicator Threat and Confidence Ratings
  • 15 Jun 2023
  • 1 Minute to read
  • Dark
    Light

Setting Indicator Threat and Confidence Ratings

  • Dark
    Light

Article summary

Overview

ThreatConnect® allows you to set an Indicator’s Threat Rating and its associated Confidence Rating. The Threat Rating identifies how much of a threat an Indicator represents, and it is measured on a scale of 0–5 skulls, where a higher rating represents a higher threat. The Confidence Rating is an expression of how confident an owner is that its Threat Rating assessment is accurate, and it is measured on a scale of 0–100. These two rankings are important because they allow users to focus on Indicators that represent the most active and relevant threats to their networks. See Evilness Rating: Skulls Scale for Cyber Threats and Best Practices: Indicator Threat and Confidence Ratings for guidelines on assigning Threat Ratings and Confidence Ratings.

Before You Start

Minimum Role(s)Organization role of Standard User
PrerequisitesAn Indicator that has been created

Setting Threat and Confidence Ratings

New Details Screen

  1. Navigate to the Details screen for an Indicator.
  2. On the Overview tab, click Editat the top right of the Details card, or click on the Confidence Rating or Threat Rating section of the Details card. The Indicator’s Threat and Confidence Ratings will now be editable (Figure 1).

    Figure 1_Setting Indicator Threat and Confidence Ratings_7.1.0

     

    • Confidence Rating: Drag the slider or enter a value in the text box to set the Indicator’s Confidence Rating.
    • Threat Rating: Select a skullto set the Indicator’s Threat Rating. To remove an Indicator’s Threat Rating, click Clear.
    • Click the Confirmbutton at the top right of the Details card to save the changes made to the Indicator’s Threat and Confidence Ratings.

Legacy Details Screen

  1. Navigate to the legacy Details screen for an Indicator.
  2. On the Overview tab, scroll down to the Details card on the right side of the screen (Figure 2).

    Figure 2_Setting Indicator Threat and Confidence Ratings_7.0.0

     

    • Overall Threat Rating: Select a skullIcon  Description automatically generatedto set the Indicator’s Threat Rating. To remove an Indicator’s Threat Rating, click ClearIcon  Description automatically generated.
    • Overall Confidence Rating: Drag the slider to set the Indicator’s Confidence Rating.
      Note
      Changes to an Indicator’s Threat and Confidence Ratings are saved automatically.

ThreatConnect® is a registered trademark of ThreatConnect, Inc.

20022-01 v.09.B


Was this article helpful?