Creating STIX objects

PIARA allows you to create any STIX object. For example, let's create a Report object.

  • Report: A common STIX object used in PIARA. Reports are narrative documents that group related STIX objects (like Indicators, Malware, Threat Actors) to describe a specific event, threat, or analysis finding (e.g., "Analysis of Campaign XYZ"). A report typically contains a curated set of STIX objects relevant to its narrative (e.g., a report on "Operation Stealthy Badger" might include specific indicators, malware and TTPs). STIX objects within a report can also exist independently or in other collections/reports.

To create a report:

  1. Click "Create"

  2. Select "Report" in the drop-down

create report1

PreviousCreating and Managing IntelligenceNextDescription

Last updated