Images

You can enrich PIARA objects (such as Indicators, Malware, Threat Actors, Reports, etc.) by attaching relevant images like screenshots, diagrams, or evidence photos. To ensure proper handling and control information sharing, PIARA requires you to classify each uploaded image into one of the following types:

• Original:

  • Purpose: For internal records and archival only, associated with a specific object. Use this for raw, unaltered source images.

  • Sharing: These images are considered strictly internal and will not be shared or exported via TAXII endpoints, even if the object they are attached to is shared.

• Confidential:

  • Purpose: For controlled sharing via TAXII, linked to the shared object.

  • Action: Before marking an image as Confidential, you may need to blur or redact any sensitive information (e.g., PII, internal network details) not suitable for the intended recipients.

  • Sharing: Images marked Confidential are included when the data of the associated object is shared via TAXII endpoints.

• Public:

  • Purpose: For broad, unrestricted sharing, linked to the shared object. These images should contain no sensitive or confidential information.

  • Action: Ensure the image is fully cleared for public consumption before selecting this type.

  • Sharing: Images marked Public are included when the data of the associated object is shared via TAXII endpoints and are suitable for wider distribution.

Adding an image:

To add an image, use the Images tab to attach relevant images. Please note that images are added by pasting them directly from your clipboard. Ensure the desired image is copied to your clipboard before pasting it into this tab.