With Trellix Insights, you can view the correlation between a threat actor and the list of tools associated with that threat actor. For better visualization, Trellix Insights connects each of these tools with the threat actor and shows it on graph view to help you understand the attack pattern.
For details about product features, usage, and best practices, click ? or Help.
Log on to ePO - SaaS and select Menu → Trellix Insights.
On the Trellix Insights dashboard, select Profiles → Tool Connections.
View threat actor details.
Select a threat actor from the Threat Actor filter on the left pane. The list of tools associated with a threat actor is displayed on the right pane.
Click the Threat Actor node to view the appropriate details such as Node Type, Threat Actor Name, Description, Sector, Country, Alias Name and more information about the selected node.
View tool details.
Select a tool from the Tools filter on the left pane. The list of threat actors associated with a specific tool is displayed on the right pane.
Click the Tools node to view the appropriate details such as Node Type, Tool Name, Description, Alias Name and Tool info about the selected node.