Threat Intelligence: Step 1 - Onboarding

[GCSCommunity]

Table of Contents

Below you'll find a table of contents for the Onboarding journey.

• Table of Contents
• Prerequisites
• Actions
• Email Configurations
• Intel Subscriptions
• Configure Users

In the Onboarding section we will discuss how to gain access to Mandiant Threat Detection through Mandiant Advantage, as well as lay the foundation for a successful implementation covering email configuration, Intel Subscriptions, and more.

Prerequisites

• Mandiant Advantage Account.
• Entitlement for Mandiant Threat Intelligence.

Actions

Email Configurations

One of the first things you will want to do when onboarding into Threat Intelligence is to ensure you receive intelligence via email.

Show More

Prerequisites

See the Relevant Links section for more documentation regarding the prerequisites.

• Mandiant Advantage Account.
• Entitlement for Mandiant Threat Intelligence.

Steps

1. Navigate to the Mandiant Advantage Login Page, sign in using your credentials.

2. Upon login, you will see your profile page. Fill out your profile appropriately.

3. Click Threat Intelligence under Applications.

4. You will be greeted with a default dashboard showing on-going threats. Click Settings > Add Email Notification.

5. Give the Email Notification a Name, Frequency, Delivery Preferences, Level of Detail, and select the Intelligence Packages that you would like included in the emails.

   1. Note: You can set up multiple Email Notifications with varying schedules and Intelligence Packages.

6. Click Save.

Relevant Links

• All Steps: https://docs.mandiant.com/home/mati-manage-account-settings#set-up-email-delivery-profiles

Intel Subscriptions

It is important that you ensure you have the subscriptions you need in Threat Intelligence in order to keep your company safe. In your Account Settings, you'll be able to submit a request for upgrades by following these steps.

Show More

Prerequisites

See the Relevant Links section for more documentation regarding the prerequisites.

• Mandiant Advantage Account.
• Entitlement for Mandiant Threat Intelligence.

Steps

1. Navigate to the Mandiant Advantage Login Page, sign in using your credentials.

2. Upon login, you will see your profile page. Fill out your profile appropriately.

3. Click Threat Intelligence under Applications.

4. You will be greeted with a default dashboard showing on-going threats. Click Settings > Intel Subscriptions.

5. Click on Request Upgrade, then fill out the form with the requested information.

   1. Note: Due to the sensitive nature of Threat Intelligence, it is important that all requests are reviewed for authenticity.

Relevant Links

• All Steps: https://docs.mandiant.com/home/mati-manage-account-settings#intel-subscriptions

Configure Users

The Administrative user in Mandiant Advantage is responsible for assigning access to Threat Intelligence. In these steps we will show how to create a user and assign the proper Mandiant applications to them.

Show More

Prerequisites

See the Relevant Links section for more documentation regarding the prerequisites.

• Administrative access to Mandiant Advantage.

Steps

1. Navigate to the Mandiant Advantage Login Page, sign in using your credentials.

2. Upon login, you will see your profile page. Select Manage from the global navigation header > Manage Users.

3. Click Add Users, then populate the form, filling the required fields, and select a Role & Access for the new user.

4. Under the Product Access header, select Threat Intelligence, then click Add.

Relevant Links

• All Steps: https://docs.mandiant.com/home/ma-manage-users-in-mandiant-advantage

Next Step: Threat Intelligence: Step 2 - Browser Plugins & Dashboards

Previous Step: Threat Intelligence - Journey Overview