Manage tools

  • Versão de lançamento: Australia
  • Atualizado 12 de mar. de 2026
  • 1 min. de leitura

    • Manage the tools information that you imported from the MITRE TAXII collections. Tools are legitimate software that are used by threat actors to perform attacks.

    Antes de Iniciar

    Role required:
    • sn_ti.admin: delete access
    • sn_ti.read: read access
    • sn_ti.write: create, write access

    Por Que e Quando Desempenhar Esta Tarefa

    Tools enable you to know how and when threat actors use them for executing campaigns. Unlike malware, these tools or software packages are often found on a system and have legitimate purposes for power users, administrators, network administrators, or even normal users.

    Procedimento

    1. Navigate to All > Threat Intelligence > MITRE ATT&CK Repository > Tools.
      You can view the listed tools.
    2. Click a tool to view all the associated information.
      In the following illustration, you can view the details for the CARROTBALL tool, its ID, source, and other related information.View the details for the tools and their related information.
    3. To view how these objects are related, click Show Relationships.

    O que Fazer Depois

    Use the techniques module to add or modify the tools data.