Intel Sources
View data from your connected threat intelligence platforms on Threats → Threat Intelligence.
The Threat Intelligence tab on the Threats page shows data from the threat intelligence platforms you have connected to Guard. This guide shows you how to open the tab, connect a source, and read the data.
Open Threat Intelligence
- Go to Threats.
- Select the Threat Intelligence tab.
The tab shows how many providers are connected, then a section for each one.
Connect a source
If no provider is connected, the tab shows No Threat Intelligence Providers Configured.
- Click Configure Integration.
- Choose a threat intelligence integration, such as Recorded Future or SOCRadar, and follow its setup steps.
After the integration syncs, the provider appears on the tab.
Read a provider's data
Each provider section lists its data categories on the left. Select a category to see a timeline and a table of the matching items. For Recorded Future, the categories are:
- IOC Indicators
- Alerts
- Playbook Alerts
- Threat Actors
- Malware
- Detection Rules
- Identity Exposure
- Analyst Notes
Support
If a connected source shows no data, contact support@praetorian.com.