Updated on 2024-11-21 GMT+08:00

Viewing Indicators

Scenario

This topic describes where to view existing intelligence indicators.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
  4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.

    Figure 1 Workspace management page

  5. In the navigation pane on the left, choose Threat Operations > Indicators.

    Figure 2 Indicators

  6. On the Indicators page, view details about the indicator.

    Figure 3 Viewing an Indicator
    Table 1 Indicator parameters

    Parameter

    Description

    Indicator Type

    Indicator Type displays the total number of indicators of all types and the number of indicators of the corresponding type.

    Overdue Indicator

    Overdue Indicator displays the total number of threat indicators that have expired and have not been closed.

    Indicator Status

    Indicator Status displays the total number of indicators in different states and the number of indicators in the corresponding state.

    Threat Degree

    Threat Degree displays the number of indicators of different threat levels.

    Indicator list

    Displays detailed information about each indicator.

    You can view the total number of indicators below the indicator list. You can view a maximum of 10,000 indicator records page by page. To view more than 10,000 records, optimize the filter criteria.

    You can view the threat degree, discovery time, and status of indicators. To view details about an indicator, click the indicator name. The indicator details are displayed on the right of the page.

    • On the Indicator Overview page, you can view basic information of an indicator as well as its association information, such as associated indicators, alerts, and incidents.
    • In the Associated Information area, you can bind or unbind an indicator to or from other indicators, alerts, and incidents.