--- title: "Setting Indicator Threat and Confidence Ratings | ThreatConnect" slug: "setting-indicator-threat-and-confidence-ratings" description: "This article defines Threat Rating and Confidence Rating for Indicators in ThreatConnect and demonstrates how to set these values for an Indicator." tags: ["Enriching Data"] updated: 2023-06-15T19:51:36Z published: 2023-06-15T19:51:36Z canonical: "knowledge.threatconnect.com/setting-indicator-threat-and-confidence-ratings" --- > ## Documentation Index > Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt > Use this file to discover all available pages before exploring further. # Setting Indicator Threat and Confidence Ratings ## Overview ThreatConnect® allows you to set an Indicator’s Threat Rating and its associated Confidence Rating. The Threat Rating identifies how much of a threat an Indicator represents, and it is measured on a scale of 0–5 skulls, where a higher rating represents a higher threat. The Confidence Rating is an expression of how confident an owner is that its Threat Rating assessment is accurate, and it is measured on a scale of 0–100. These two rankings are important because they allow users to focus on Indicators that represent the most active and relevant threats to their networks. See [*Evilness Rating: Skulls Scale for Cyber Threats*](https://threatconnect.com/resource/evilness-rating-skulls-scale-for-cyber-threats/) and [*Best Practices: Indicator Threat and Confidence Ratings*](https://knowledge.threatconnect.com/docs/best-practices-indicator-threat-and-confidence-ratings) for guidelines on assigning Threat Ratings and Confidence Ratings. ## Before You Start | Minimum Role(s) | Organization role of Standard User | | --- | --- | | Prerequisites | An [Indicator](https://knowledge.threatconnect.com/docs/the-threatconnect-data-model#indicators) that has been created | ## Setting Threat and Confidence Ratings ### New Details Screen 1. [Navigate to the **Details** screen](https://knowledge.threatconnect.com/docs/the-details-screen#viewing-the-details-screen) for an Indicator. 2. On the **Overview** tab, click **Edit![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Edit%20button_Details%20card_Details%20screen.png)**at the top right of the **Details** card, or click on the **Confidence Rating** or **Threat Rating** section of the **Details** card. The Indicator’s Threat and Confidence Ratings will now be editable (Figure 1). ![Figure 1_Setting Indicator Threat and Confidence Ratings_7.1.0](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%201_Setting%20Indicator%20Threat%20and%20Confidence%20Ratings_7.1.0.png) - **Confidence Rating**: Drag the slider or enter a value in the text box to set the Indicator’s Confidence Rating. - **Threat Rating**: Select a skull![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Skull%20icon_Light%20gray.svg)to set the Indicator’s Threat Rating. To remove an Indicator’s Threat Rating, click **Clear**![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Clear%20icon_New.png). - Click the **Confirm![](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Confirm%20icon_Details%20screen.png)**button at the top right of the **Details** card to save the changes made to the Indicator’s Threat and Confidence Ratings. ### Legacy Details Screen 1. [Navigate to the legacy **Details** screen](https://knowledge.threatconnect.com/docs/the-details-screen-legacy#viewing-the-legacy-details-screen) for an Indicator. 2. On the **Overview** tab, scroll down to the **Details** card on the right side of the screen (Figure 2). ![Figure 2_Setting Indicator Threat and Confidence Ratings_7.0.0](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%202_Setting%20Indicator%20Threat%20and%20Confidence%20Ratings_7.0.0.png) - **Overall Threat Rating**: Select a skull![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/setting-indicator-threat-and-confidence-ratings-image-7o3lwqug.png)to set the Indicator’s Threat Rating. To remove an Indicator’s Threat Rating, click **Clear**![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/setting-indicator-threat-and-confidence-ratings-image-amtiowva.png). - **Overall Confidence Rating**: Drag the slider to set the Indicator’s Confidence Rating.NoteChanges to an Indicator’s Threat and Confidence Ratings are saved automatically. --- *ThreatConnect® is a registered trademark of ThreatConnect, Inc.* 20022-01 v.09.B ## Related - [The Details Screen](/the-details-screen.md) - [The Details Screen (Legacy)](/the-details-screen-legacy.md)