Recent Threats Dashboard

The Recent Threat Dashboard is your daily starting point for Threat Information

• Go to your Recent Threats Dashboard

The Recent Threats Dashboard shows your Events in chronological order. All new events are shown here. This is useful because you can have this dashboard open on a second screen, or on a wall screen in an Operations Center, and you can always keep an eye on what's going on right now. You'll also be able to quickly spot anything of importance because of the tags.

The Recent Threats Dashboard

The Recent Threats Dashboard has 2 or 3 columns, depending on your license:

• Open Source

Everything from public & free, non-social media sources will come in in this column. Blogposts and news articles from security websites and vendors will appear here. as well as vulnerability reports. If you feel some of these sources are too noisy, or irrelevant to you, you can turn news sources on and off in the news module.

• Premium & Darkweb

These are your paid-for sources. Most of them work on a bring-your-own-license basis, which means that you need to already have a subscription with the vendors to be able to pull their reports and data in. All you have to do is provide your API-key of the tools and sources you have access to and want to integrate with Liberty91. You can turn the integrations on and off in the Modules dashboard.

If you subscribe to the Darkweb Module, you will the darkweb alerts appear here as well.

• X

You can follow your favourite Security Researchers on X, and their tweets will appear here. You can choose which X-accounts to follow in the X Module.

Events

Every event shows you the source, the title, and how long ago it was created. If there are any hits with entities in your Threat Library or your Company Assets, it will show as a tag. Threat Actors are purple, malware is blue and vulnerabilities are black (white in darkmode) tags. Liberty91 also extracts Techniques Tactics & Procedures as MITRE ATT&CK Techniques from the Event. If techniques are found, their codes are presented as part of the event on the dashboard. You can find out more about how the technique is described in this event by hovering over the technique.

This event was created 27 minutes ago by The Cyber Express, and describes Cobalt Strike, which we track as malware in our Threat Library. It also shows seven MITRE ATT&CK Techniques related to this event.

Hovering over the MITRE ATT&CK Technique shows the name of the technique, plus a description of how this technique was used in this particular campaign

This is useful because you can immediately see if an event is relevant to you or not. Clicking on the event will lead you to the Event Card.