The Approve Intel tab allows you to review and approve all intel submitted by users. Seqrite Admin will review and approve intel entries before they are published. Additionally, Seqrite Admin can add new intel and can also view the intel submissions categorized by organization.
Viewing the Approve Intel
Seqrite Admin can view the intel submissions details such as severity (Critical, High, Medium, Low) highlighted with the color codes, Sub ID (Submission ID), Intel ID, title, reported on, approved on, and the status in the tabular format.
To view the details of each intel, follow these steps:
- On the Seqrite Threat Intelligence portal, click Admin and select Approve Intel in the left pane.
- On the Approve Intel page, select the intel and click the > icon.
The approve intel page displays details such as, Primary Information, Additional information and TTP mappings submitted by intel submitter.
Filtering the Intel Submissions List
You can filter the intel list to refine results based on submission ID, intel ID, submission title, reported on, approved on, and status.
To filter the intel submissions list, follow these steps:
- On the Seqrite Threat Intelligence portal, click Admin and select Approve Intel in the left pane.
- On the Approve Intel page click
. - Enter the details that are, submission ID, intel ID, submission title, reported on, approved on, and submission status and then click Apply.
The system displays filtered data.
Approve/Reject Submitted Intel
You can review and evaluate the submitted intel for accuracy and relevance. Based on your assessment, you can either approve the intel to publish or reject if it does not meet the required standards.
To approve/reject intel submissions, follow these steps:
- On the Seqrite Threat Intelligence portal, click Admin and select Approve Intel in the left pane.
- On the Approve Intel page, click the intel you want to approve.
- Click Approve to approve the intel else click Reject.