Viewing Indicators

Scenario

This topic describes where to view existing intelligence indicators.

Procedure

1. Log in to the management console.
2. Click in the upper part of the page and choose Security > SecMaster.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
4. In the navigation pane on the left, choose Threat Operations > Indicators.
5. On the Indicators page, view details about the indicator.

   Table 1 Indicator parameters

   Parameter	Description
   Indicator Type	Indicator Type displays the total number of indicators of all types and the number of indicators of the corresponding type.
   Overdue Indicator	Overdue Indicator displays the total number of threat indicators that have expired and have not been closed.
   Indicator Status	Indicator Status displays the total number of indicators in different states and the number of indicators in the corresponding state.
   Threat Degree	Threat Degree displays the number of indicators of different threat levels.
   Indicator list	Displays detailed information about each indicator. You can view the total number of indicators below the indicator list. You can view a maximum of 10,000 indicator records page by page. To view more than 10,000 records, optimize the filter criteria. You can view the threat degree, discovery time, and status of indicators. To view details about an indicator, click the indicator name. The indicator details are displayed on the right of the page. On the Indicator Overview page, you can view basic information of an indicator as well as its association information, such as associated indicators, alerts, and incidents. In the Associated Information area, you can bind or unbind an indicator to or from other indicators, alerts, and incidents.