ThreatStream Weekly Summary Dashboard

The ThreatStream Weekly Summary dashboard provides reports regarding organization data and ThreatStream Integrator status. You can use these reports to gauge data quality, the importing activity of your organization users, the effectiveness of your intelligence feeds, and more.

If data is not available for a particular chart, the chart is not shown. Data is refreshed every Sunday at midnight.

To access the ThreatStream Weekly Summary dashboard, navigate to DashboardLibrary and locate the ThreatStream Weekly Summary dashboard using the Search field.

To access the ThreatStream Weekly Summary dashboard in the classic UI:

  1. Navigate to DashboardLibrary.

  2. Click the ThreatStream Dashboards folder.

  3. Click ThreatStream Weekly Summary.

The ThreatStream Weekly Summary dashboard is displayed.

Below is an example of the ThreatStream Weekly Summary dashboard.

Share the dashboard by copying the dashboard URL or exporting it in JSON format. For details, see Sharing Dashboards or Sharing Dashboards (Classic UI) if you use the classic UI.
Add the dashboard to the list of favorites. All your favorite dashboards can be found in the Bookmarked section of the Dashboard menu.
Designate the current dashboard as your primary dashboard. The setting is saved per user, so each user in the organization can designate their own primary dashboard. The name of the primary dashboard appears as the first item in the Dashboard menu.

Select a time range for the data displayed on the dashboard. You can select an absolute time range or a relative time range. By default, data for the last 7 days is displayed.

Select a time range for refreshing the dashboard. Select Off if you don’t want to refresh the dashboard. Click to force dashboard refresh.

Clone the dashboard. For details, see Cloning Dashboards or Cloning Dashboards (Classic UI) if you use the classic UI.

Export the dashboard in PDF format. For details, see Exporting Dashboards in PDF Format or Exporting Dashboards in PDF Format if you use the classic UI.

Organization Intelligence Summaries

The following table contains the list of all panels available with the ThreatStream Weekly Summary dashboard.

Panel Description
Data Quality

View the total number of observables from the last seven days by status. The ratio of False Positive to Active threats is a primary gauge of data quality.

Threats by Severity

View the severity of data collected over the last seven days.

Top Importing Users View the users in your organization who have imported the most threat intelligence data over the last seven days.
Threat Volume

View which type of data provided the largest number of threats—data shared with Anomali Community, data from your trusted circles, or data restricted to your organization. Feeds purchased in the Anomali APP Store are classified as private feeds.

Top Threat Streams View which feeds have provided the most intelligence for your organization over the last seven days.
Stream Quality

View the number of observables provided by each feed to which your organization is subscribed.

All ThreatStream Weekly Summary dashboard panels have the management menu enabling you to take the following actions:

  • Open a panel query in Event Search

  • View a full-screen version of a panel

  • Share a panel with other ThreatStream users in your organization.

  • Inspect panel data

  • Refresh panel data

For details, refer to Managing Dashboard Panels or Managing Dashboard Panels (Classic UI) if you use the Classic UI.