Suggestions.

There should be two dashboards

platform activity
threat activity

The platform activity corresponds to what is implemented now.
There could be more granularity as regards ingested entities: new/total malware, intrusions sets, attack patterns, etc

The threat activity dashboard could include:

top x most active malware
top x most active intrusion sets / threat actors
top x most active campaigns
top x most affected countries
top x most affected organisations

There could be a filter to select the time window to calculate the "top x most active zzz":

last 24H
last week
last month
last 3 months
last 6 months
last 12 months

Create a threat activity dashboard #505

Description

SamuelHassineopenedon Feb 18, 2020

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

SamuelHassine
openedon Feb 18, 2020