Subscriptions¶
Connect to external threat intelligence feeds via CyberGrid.
Managing Subscriptions¶
- Navigate to CyberGrid > Subscriptions
- Browse available feeds
- Click Subscribe and configure sync schedule
- Set confidence thresholds (optional)
Subscription Properties¶
| Field | Description |
|---|---|
| Feed name | Intelligence feed name |
| Publisher | Organization providing the feed |
| Status | Active, Paused, or Error |
| Last sync | Most recent successful sync |
| Indicator count | Indicators from this feed |
| Sync schedule | Update frequency |
Indicator Types¶
Feeds can include IPs, domains, file hashes, URLs, and email addresses.
Enrichment Integration¶
Matched indicators update node threat scores, affecting incident severity and compliance calculations.