Threat Insights Dashboard

The new threat insights dashboard provides a table detailing threat groups, including their industries, geographies, type, number of findings, activity scores, and common tactics, techniques, and procedures (TTPs).

Features of the Threat Insights Dashboard

• Users can filter by accelerating activity scores to identify which threat actors are surging in activity versus those becoming less relevant.
• Clicking on a specific actor provides detailed information, including comparative activity scores, group descriptions, targeted industries/geographies, and associated TTPs.
• Users can pivot from a specific threat actor to a subset of bad and warn findings directly associated with that actor’s techniques.

How can I get more information on a threat group?

From the Threat Insights dashboard:

Click on the threat group in the Threat Insights table to get a full view with all detailed info that Bitsight has about it, including:

• Group aliases
• A description of the group
• Affected industries and geographies
• All the TTPs or behaviors the threat group uses to exploit issues.

To see this information from the Findings Table: 

When viewing a finding, a new "threat insight" tab explains why the issue matters by displaying:

• The industries and geographies targeted by the groups exploiting these issues.
• The TTPs used to exploit the issue.
• The specific threat groups known to exploit this type of issue.

How can I use this for prioritization?

On the Findings Table, you can now filter by:

• Threat Insights
• Threat Groups
• Threat Activity Level

So instead of having a generic list of findings, you now have a subset of issues that are associated with a specific threat actor and its activity level.

To filter From the Threat Insights Dashboard:

1. Select your preferred filters to the dashboard.
2. Find the threat group you want to investigate.
3. Click on the linked content in the Bad / Warn Findings column. It will be displayed as a number.
4. This will open the Findings Table and show you a list of all of the bad/warn findings linked to this specific threat actor.

How do I get to the Threat Insights dashboard?

1. On the left-hand navigation toolbar, click on Findings.
2. Click on Threat Insights. This will bring you to the Threat Insights dashboard.