Skip to main content

Cloud-delivered Advanced AnalyticsExabeam Advanced Analytics Administration Guide

Create a New Context Table from a Threat Intelligence Feed

New context tables can be created from specific threat intelligence feeds. You can create new context tables in one of two ways, from an individual feed or from multiple feeds in bulk.

Create a Table from a Single Feed

To create a new context table from a single threat intelligence feed:

  1. Navigate to the Threat Intelligence Feeds page, as described in View Threat Intelligence Feeds.

  2. Find the feed from which you want to create a new content table and, in the Status column, click edit A pen shaped edit icon.. A list of the existing context tables opens.

  3. At the bottom of the list, select the Add Context Table option. A set of options for creating a new context table is displayed.

    new-context-table.png

  4. Enter the Title, Object Type, and Type information to define the new context table.

  5. Click Add to save the new context table.

Create a Table from Multiple Feeds

To create a new context table from a bulk selection of threat intelligence feeds:

  1. Navigate to the Threat Intelligence Feeds page, as described in View Threat Intelligence Feeds.

  2. Use the check boxes on the left of each feed to select multiple feeds from which you want to create a new context table.

  3. At the top of the feeds list, click Assign. A list of the existing context tables opens.

    bulk-feed-create-table.png

  4. At the bottom of the list, select the Add Context Table option. A set of options for creating a new context table is displayed.

    new-context-table-bulk.png

  5. Enter the Title, Object Type, and Type information to define the new context table.

  6. Click Add to save the new context table.