When you have the Threat Actor Assurance Module (TAAM), you can associate any existing Evaluation and Sequence to a Threat Actor by adding its Threat Actor Alias tag. When you do this, the Evaluation or Sequence appears in the Sequences and Evaluations section of the Threat Actor's profile.
Threat Actor Aliases on a Sequence or Evaluation
To Associate an Evaluation with a Threat Actor
- Click Library > Evaluations.
- Select the Evaluation so you see the Evaluation Preview.
- In the Threat Actor Aliases section, click Add. The list of existing Tags is displayed.
Select a Tag from the list. You can also click in the enter Tag field and type a full or partial tag to limit the list of available tags. If the tag you want to add doesn't exist, type it and then click New Tag: tag.
Add Threat Actor Alias to a Sequence or Evaluation
If you create a new Tag, you will need to edit the Threat Actor to include that tag as well.
Repeat until you've added all the aliases you want.
To Associate a Sequence with a Threat Actor
- Click Library > Sequences.
- Select the Sequence so you see the Sequence Preview.
- In the Threat Actor Aliases section, click Add. The list of existing Tags is displayed.
Select a Tag from the list. You can also click in the enter Tag field and type a full or partial tag to limit the list of available tags. If the tag you want to add doesn't exist, type it and then click New Tag: <tag>.
If you create a new Tag, you will need to edit the Threat Actor to include that tag as well
- Repeat until you've added all the aliases you want