Indicators allow security teams to focus on threats based on actionable intelligence from Mandiant. They are associated with specific individual and global campaigns, and related data is available at various locations in Mandiant Advantage Threat Intelligence (MATI).
To Access Indicators Associated With a Campaign
- Go to Explore > Campaigns.
- (Optional) Use the search bar or filters, as needed, to narrow down the list of campaigns.
- Click the campaign headline to open the campaign details. If there are indicators, a graph and an Indicators tab appear.
Indicators Graph on a Campaign Details Page - Click Indicators to open the table and view the indicator data, including campaign and malware associations.
Indicators Table
- (Optional) If you want a local copy of the Indicator data, click download
below Indicators. A comma-separated value (CSV) file downloads to your local machine.
below Indicators. A comma-separated value (CSV) file downloads to your local machine.