Soltra Edge provides a feature that allows the Soltra Edge admin or user to create and publish a feed of specifically identified threat intelligence data. This data can be shared with a group of users or shared with specific people.
To access Publish select “Publish” in the navigation bar.
How to Publish a Feed
Select the “Add” button.
When adding a feed, you are provided a menu of options you can use for filtering what data you want in the feed you are creating.
"Search Types" allows you to dictate what object type you are wanting to see in your feed. You can select as many object types as desired. At least one main object type must be selected.
"Common Filters" apply to all objects. These are filters like seeing only objects of a TLP level, only obejcts that have specific Handling Caveats, only objects submited by a Username, or only objects submitted by an Organization.
Please note the following
"Indicator Filters" apply to indicator type objects only.
The “Related Objects” option by default pre-selects all related objects to be included in your created feed. These are objects that have a STIX relationship with the object being polled.
Date Range provides the time and date parameters to which the feed will filter objects. This can include Since Last Pull, Date Offset, or Date Range. Please note, Date/Time parameters may be overridden by TAXII clients.
The “Security” menu option allows the feed creator to determine with whom a feed will be shared, via sharing with all, choosing a username, or sharing with a Trustgroup.
For government use only. If selected, only objects with the specified ISA ACS markings will be included.
Name the feed
Provide a name for your feed. Once you type in a name for the feed, select the blue “apply” button.
Your created feed will be shown as follows.
Click on the blue feed name and you will see the results of the created feed.
Editing a created Feed
To edit a feed, click the orange "Edit" icon next to your feed name.
Edit the fields you want to change and select the blue “Apply” button.
Deleting a Feed
To delete a feed, from the main “Publish” page, select the red "X" next to the feed you want removed.
For more information, join the conversation in the Soltra Edge Forums at forums.soltra.com.