Attachments

You can enrich PIARA objects (such as Indicators, Malware, Threat Actors, Reports, etc.) by attaching relevant files like documents, archives, video files, etc. To ensure proper handling and control information sharing, PIARA requires you to classify each uploaded file into one of the following types:

• Internal Attachment:

  • Purpose: For internal records and archival only, associated with a specific object.

  • Sharing: These attachments are considered strictly internal and will not be shared or exported via TAXII endpoints, even if the object they are attached to is shared.

• Public Attachment:

  • Purpose: For broad, unrestricted sharing, linked to the shared object.

  • Action: Ensure the attachment is fully cleared for public consumption before selecting this type.

  • Sharing: Attachments marked as Public are included when the data of the associated object is shared via TAXII endpoints and are suitable for wider distribution.

Adding an attachment:

To add an attachment:

1. Use the Attachments tab

2. Select "Internal" or "Public" attachments

3. Click "Upload"