Build Your Threat Library.
Your Threat Library tracks and reports on the threats that matter to you and your Stakeholders. You start with an empty canvas, but you can build a comprehensive library in minutes by turning the suggestions in an Event into Threat Cards. This page shows you the fastest way to do it.
Build from an Event's suggestions
The agents read every Event, check it for relevance against what they know about your Organizations and your Intelligence Requirements, and extract the Threat Actors, malware, and vulnerabilities mentioned, along with the MITRE ATT&CK techniques described in the article.
- Open an Event that mentions a threat you want to track.
- Find the Suggested Threat Actors (and other suggested Threat Entities) extracted from the Event.
- Click a suggestion. Liberty91 creates a Threat Card in your Threat Library, finds all related relevant reporting, and generates an up-to-date description.
Once the Threat Card exists, you can start tracking the entity and receiving Alerts about it. To understand the different entity types and how they relate, see Threat Entities. To group related entities into a single bucket, see Collections.
Where your threats show up
New Threat Entities you track surface across the platform, including in your Recent Threats dashboard, where they are highlighted in any Event that mentions them.
Frequently asked questions
Do I have to add threats one by one?
No. The agents extract Threat Actors, malware, and vulnerabilities from each Event. Clicking a suggestion creates a fully described Threat Card in a single step.