TLP Amber reports
    • 10 Jan 2024
    • 1 Minute to read
    • Dark
      Light

    TLP Amber reports

    • Dark
      Light

    Article Summary

    TLP Amber reports are finished intelligence reports, accessed with an Enterprise subscription within the platform, that provide a comprehensive breakdown of how to detect, counteract and monitor the activities of specific threat actors, and APT campaigns.

    The reports provide more platform-specific context than our public research blogs are able to offer, and allow us to pass on intelligence and threat hunting techniques deemed too sensitive for the public sphere, where threat actors may have access to it.

    TLP Amber reports

    TLP Amber reports contain links to queries, regex strings, feed data and sections on the specific actions that security teams need to take in the platform, to counteract emerging TTPs.

    Screenshot 2024-01-10 at 17.29.13.png

    To access TLP Amber reports:

    1. Login to your Enterprise account

    2. Navigate to Threat Intelligence Management > TLP Amber Reports

    3. Use the boxes at the top to:

      1. Search through reports
      2. Filter reports by Tag
      3. Filter by the Feed contained within each report.

    Was this article helpful?

    ESC

    Eddy, a super-smart generative AI, opening up ways to have tailored queries and responses