Skip to main content
All CollectionsLookingGlass scoutTHREAT DocumentationUser Guide
scoutTHREAT User Documentation - Table of Contents
scoutTHREAT User Documentation - Table of Contents

Version 12.4.9

B
Written by Benjamin Dewey
Updated over a week ago

Table of Contents

  1. Welcome to scoutTHREAT

    1. Support and Contact Information

    2. Getting Started

      1. Supported Browsers

      2. Log in

      3. Workflow Example: Creating Your First Threat Actor Object

      4. Product FAQs

  2. Generating scoutTHREAT API Keys

    1. Adding a scoutPRIME API Key

  3. The Threat Intelligence Collaboration Environment (TICE)

    1. TICE Login

    2. The TICE Homepage

    3. The TICE Module Validation Process

    4. TICE Workflow Example

    5. Validating Intelligence Items

      1. Updating scoutTHREAT Objects with New TICE Information

      2. Validating and Adding New TICE Intelligence to scoutTHREAT

    6. Sharing to TICE

    7. Steps for Sharing Intelligence to TICE

    8. The TICE Rule Manager

      1. Adding Rules with Rule Builder

      2. Adding Rules Manually

      3. JXEL for Creating Rule Conditions

    9. Metrics and Audits

  4. The scoutTHREAT User Interface (UI)

    1. The Dashboard

      1. Weekly Needles

    2. Navigation Bar

      1. Information

      2. Workflow

      3. Intelligence

      4. Observables

      5. Search

  5. Relationship Objects

    1. Relationship Type and Intelligence Objects

    2. Relationship Type and Identity Objects

    3. Relationship Type and Information Reports

  6. Search

    1. Using Search and Filters

    2. Save as Threat Query

    3. Threat Queries in TICE Environment

    4. Using Search: Workflow Example

  7. Identity Objects

    1. Identity Class Types

    2. Workflow Example: Adding and Identity Object

    3. Adding Relationships and External References to an Identity

    4. Deactivating and Sharing an Identity Object

  8. Requests for Information

    1. Creating a Request for Information

    2. Deactivating a Request for Information

  9. Audit, Notes, & Opinions

    1. Audit

    2. Adding Notes to Objects

    3. Creating New Notes

    4. Adding Opinions to Objects

    5. Creating New Opinions

  10. Information Reports

    1. Viewing Information Reports

    2. Creating and Editing Information Reports

    3. Entity Extraction Feature

    4. Entity Extraction Rules

    5. Adding or Editing Entity Extraction Rules

    6. Deactivating and Sharing an Information Report

  11. External References

    1. Adding External References

    2. Deactivating an External Reference

  12. Using Workbenches

    1. Creating a Workbench

  13. Threat Queries

    1. Creating a Threat Query

    2. Creating TICE Environment Threat Queries

    3. Editing Threat Queries

    4. Workflow Examples: Threat Queries

  14. Checklists

    1. Creating a Checklist

    2. Viewing Checklists

  15. Attack Pattern Objects

    1. Creating an Attack Pattern Object

    2. Deactivating and Sharing an Attack Pattern Object

  16. Campaign Objects

    1. Creating a Campaign Object

    2. Deactivating and Sharing a Campaign Object

  17. Course of Action

    1. Adding a Course of Action

  18. Indicator Objects

    1. Creating an Indicator Object

    2. Deactivating and Sharing an Indicator Object

  19. Infrastructure Objects

    1. Creating an Infrastructure Object

    2. Deactivating and Sharing an Infrastructure Object

  20. Location Objects

    1. Creating a Location Object

    2. Deactivating and Sharing a Location Object

  21. Malware Objects

    1. Creating a Malware Object

    2. Deactivating and Sharing a Malware Object

  22. Threat Actor Objects

    1. Creating a Threat Actor Object

    2. AILA and Workflow

    3. Creating a Threat Actor Report

    4. Deactivating and Sharing a Threat Actor Object

  23. Tool Objects

    1. Creating a Tool Object

    2. Deactivating and Sharing a Tool Object

  24. Victim Target

    1. Adding a Victim Target

  25. Vulnerability Objects

    1. Creating a Vulnerability Object

    2. Deactivating and Sharing a Vulnerability Object

  26. Malware Analysis

    1. Adding a Malware Analysis Object

    2. Deleting and Sharing a Malware Analysis Object

  27. Observed Data

    1. Adding an Observed Data Object

    2. Deleting and Sharing an Observed Data Object

  28. Observables

    1. Adding Observables Objects

    2. Deleting Observables

    3. Entity Extraction

  29. scoutPRIME Integration

    1. Workflow Example: Creating a scoutPRIME Collection Workflow

    2. Modifying and Adding to a Collection

    3. Adding to a Collection

Appendix: scoutTHREAT User Roles

Ask Us

Is there an article you can't find about how scoutTHREAT works or about one of its features? Ask us! You can send an email to: [email protected]. We'll respond to you as soon as possible.

Other Links

Did this answer your question?