You can generate a detailed report on individual threat campaigns to understand attacker behavior, tactics, global impact, MITRE techniques, and IOCs to support investigation and response.
Log on to Trellix Insights.
Click
and select Campaigns.Click the
Reports icon of an individual campaign. The report gets downloaded in PDF format.The following details are displayed in the report:
Campaign details: Summarizes the campaign's purpose, attack method, threat level, and targeted sectors or regions.
Threat Actors: Provides details on the attackers (or a group) behind the campaign, including their motives, known tools, and historical activity.
Common Vulnerabilities and Exposures (CVE): Lists any known CVEs exploited in the campaign to help identify and patch security gaps.
Global Prevalence: Displays where the campaign has been observed globally based on detection—by country and sector.
Tools: Lists the malware, frameworks, or utilities used in the campaign.
Threat Behavior: Maps the campaign's tactics and techniques to the MITRE ATT&CK framework.
Indicator of Compromise (IOCs): Includes file hashes, URLs, domains, and IPs linked to the campaign for threat detection and hunting.