Create Private Judgment

You use the Create Judgment option on the Pivot menu to add a private judgment for an observable and associate the appropriate indicators. Once the judgment is created, it is displayed on the private Judgments page.

Pivot Menu

Perform the following steps to create a judgment:

  1. Click the (Pivot Menu) icon next to the observable and choose Create Judgment.

    2. Create Judgment

  2. Click Link Indicators to open the Link Indicators form.

    3. Link Indicators

    You can search for indicators and narrow the list by checking the check boxes for Confidence, Severity, and TLP.

  3. Check the check box next to the indicators you want to include in the judgment and then click Select Indicators to add them to the judgment.

  4. On the Create Judgment form, complete the following information:

    Field

    Description

    Disposition

    Required. Click the drop-down arrow and choose Unknown, Common, Malicious, Suspicious to indicate the disposition for the observable.

    Expiration

    Specify the period the judgment is valid. Enter or scroll to the number value, and then click the drop-down arrow and choose Days, Weeks, or Years.

    TLP

    Required. Click the drop-down arrow and choose the appropriate TLP designation to be assigned to the judgment (Red, Amber, Green, or White).

    Reason

    Enter a descriptive reason for creating a judgment for the observable.

  5. Click Create. A color-coded message is displayed in the lower right corner indicating the new judgment has been created; the color indicates the disposition.