Threat Intelligence Quick Start Guide

Overview

The Mandiant Advantage (https://www.mandiant.com/advantage) platform is a controls-agnostic software-as-a-service (SaaS) suite of products that automates Mandiant expertise and intelligence into customer environments. Mandiant Advantage: QuickStart Guides are designed to assist our customers with access to all entitled resources and additional resources from one organized reference, enabling rapid user orientation and time to first value.

Mandiant Advantage Subscriptions

Threat Intelligence: Mandiant Threat Intelligence provides customers with intelligence on who is most likely to attack them, how they are going to attack, and what tools they will use. This allows customers to prepare their defenses against an imminent attack. Subscriptions include Fusion, Security Operations, Vulnerability, and Digital Threat Monitoring (DTM).
Automated Defense: Mandiant Automated Defense is software that acts as a virtual Mandiant analyst, enriching and correlating alerts and events across the security environment with Mandiant Threat Intelligence to deliver scoped and escalated investigations.
Security Validation: Mandiant Security Validation is a risk management technology informed by the Mandiant Intelligence Grid representing active adversary tactics, techniques, and procedures (TTPs). The Security Instrumentation Platform leverages authentic, active attack and actor TTPs to automate a testing program to capture real data on how your security controls are performing. Visibility gained from automated and continuous validation enables your security team to optimize your environment and make the right investments in the future. Security Validation can be delivered as on-prem or SaaS-based technology, either operated side-by-side with your team or provided as an outcome-based service fully managed by Mandiant experts.
Attack Surface Management: Mandiant Advantage Attack Surface Management helps companies understand their digital footprint and focus on the vulnerabilities that hackers are most likely to target.
Customer Success: Helps customers onboard and actively get value from Mandiant Advantage subscription capabilities through strategic guidance and deep technical subject matter expertise addressing specific needs and integrations related to customer processes and workflows.

Mandiant Advantage Support

Our technical support staff is focused on Mandiant Threat Intelligence, Automated Defense, and Security Validation products. Customer Support coverage is 24 hours a day, 365 days a year. Issues are escalated by priority scope. See support (https://mandiant.com/support) for full details.

QuickStart: Threat Intelligence

Mandiant Advantage Threat Intelligence provides highly contextualized details and interactive visualizations for threat indicators and finished intelligence reports.

Getting Started Checklist

The following recommended first steps can help you get an effective start with your Mandiant Advantage Threat Intelligence subscription:

Complete Account Setup

Click Settings to complete your account setup on the Account Management page, including configuring your email delivery options, managing your Intel Subscriptions, changing your password, viewing service requests, and setting up API access. For more details, see Threat Intelligence Account Management.

Add Team Accounts

If you are an admin for your account, you can create accounts for others in your organization. See Add A New User (Threat Intelligence).

Review the Advantage Documentation Portal

The Documentation portal provides an array of training and enablement assets to familiarize you with Mandiant Advantage products and services.

Set up the Browser Plugin

The plugin provides in-page visual cues for terms and indicators associated with Threat Intelligence reports.
Review the Browser Plugin Overview article and watch the Browser Plugin Demo Video.
As a Mandiant Advantage subscriber, you have access to the browser plugin for Chrome, Firefox, and Edge.

Set up API Capabilities

Our latest downloadable API for custom integrations can be found on our API Documentation page.