Threat Scout | Intelligence Center export settings#

When your Threat Scout is connected to your Intelligence Center you can set default settings for the data exports to the Intelligence Center.

Change New Report Settings#

Every export from Threat Scout to your Intelligence Center creates a new report entity.

You can change the settings for the creation of this entity:

From the start page of Threat Scout, select .
From Sending data to the Intelligence Center select New Report object.
In the left field under Report title, select the initial part of each created report entity’s title.
In the right field under Report title, select the dynamic, second part of each created report entity’s title from the drop-down menu.
Under Analysis, select whether to include the full text of the web page or just the web page’s URL in the created report entities’ analysis fields.
Under Intents, select an intent from the drop-down menu to apply to all created report entities.
Select Save settings.

The settings defined below also apply to the created Report entity.

From the start page of Threat Scout, select .
From Sending data to the Intelligence Center select New Entity object.
Under TLP, set a TLP color to apply to each created entity.
Under Confidence, set a Confidence level to apply to each created entity.
Under Tags select the tags you want to apply to the created Report entity.
You can:
- type in the Tags field to search for specific tags.
- deselect a tag by selecting the X in front of it.
- deselect all selected tags by selecting the X on the right of the Tags field.
Select Save settings.

From the start page of Threat Scout, select .
From Sending data to the Intelligence Center select New Observable object.
From the Maliciousness drop-down menu, select the maliciousness you would like to apply to each created observable.
Select the checkbox if you would like to create the observables as indicator entities.
Select Save settings.

From the start page of Threat Scout, select .
From Sending data to the Intelligence Center select Any new object.
From the Source drop down, select a source you would like to apply to each created object.
Select the checkbox if you would like to add the web page’s URL to each created object as an Information source reference.
Select Save settings.