OpenCTI Custom Dashboards Library

Name: OpenCTI Custom Dashboards Library
Rating: 4.8 (150 reviews)

Jean-Philippe Salles
Alternative Global Dashboard
July 16, 2025
Global
A simple dashboard providing key insights into the knowledge base.
From version : 6.5.0
PUBLISHED
Lucas Guiglionia
[Administration] Activity Monitoring
July 16, 2025
Administration
This dashboard provides an overview of platform activity. It highlights key metrics for monitoring user behavior and detecting suspicious actions, with a dedicated focus on administrator activity and unusual patterns.
From version : 6.7.0
PUBLISHED
Jean-Philippe Salles
[Strategic sector] High-Tech
July 16, 2025
Strategic
A strategic dashboard that shows threats facing the Technologies sector, one of a series of sector-focused dashboards. It includes overviews of Actors, Malware, TTPs and Vulnerabilities reported to be targeting organisations in the sector.
From version : 6.5.2
PUBLISHED
Jean-Philippe Salles
[Strategic sector] Defense
July 16, 2025
Strategic
DEFENSE
A strategic dashboard that shows threats facing the Defense sector, one of a series of sector-focused dashboards. It includes overviews of Actors, Malware, TTPs and Vulnerabilities reported to be targeting organisations in the sector.
From version : 6.5.2
PUBLISHED
Jermain Njemanze
[Sector] Energy
July 16, 2025
Energy
Threat Intelligence
map widget
A beginner dashboard illustrating metrics about threat data and threat intelligence related to the Energy sector and its sub-sectors.
From version : 6.5.0
PUBLISHED
Jean-Philippe Salles
[Sector] Energy & sub sectors
July 16, 2025
Energy
Threat Intelligence
An advanced dashboard giving you a full overview of threat activities against Energy sector and its subsectors (Oil, Gas, Nuclear, Renewable energies, Electricity). This Dashboard can be adapted to cover other Sectors.
From version : 6.5.0
PUBLISHED
Jean-Philippe Salles
[Sector] Health & sub sectors
July 16, 2025
Threat Intelligence
Health
Advanced dashboard with full overview of threat activities against Health sector and its subsectors (Hospital, Research, Services, Manufacturing, Pharmacy). Can be adapted to cover other Sectors.
From version : 6.5.0
PUBLISHED
Jean-Philippe Salles
[Global] Threat Intelligence
July 16, 2025
Threat Intelligence
Global
More complete Dashboard than the Default one giving details on qualified Intelligence in the platform and letting experiment with more widgets and data sources.
From version : 6.5.0
PUBLISHED
Jean-Philippe Salles
[Global] Security Operations
July 16, 2025
Incident Management
Assets security
Monitor your Security Operations in the context of Incident management. Requires integrations with security systems able to feed OpenCTI with alerts and incidents.
From version : 6.5.0
PUBLISHED
Nicolas Quintin
[Use Case] Vulnerability Management
July 16, 2025
Vulnerability Management
Threat Intelligence
Vulnerability Assessment
Assets security
Assess vulnerabilities that could affect your assets, with a view of criticality/severity, evaluate who is exploiting these vulnerabilities and how, and finally, project into the future with a view of the vulnerabilities.
From version : 6.5.0
PUBLISHED
Lucas Guiglionia
[Use case] Vulnerability Exploitation Monitoring
July 16, 2025
Vulnerability Management
Vulnerability Assessment
Threat monitoring
A dashboard for monitoring vulnerability exploitation. It provides an overview of new vulnerabilities, exploitation volume, threats involved, associated TTPs, and more.
From version : 6.5.0
PUBLISHED
Lucas Guiglionia
[Administration] Data Volume & Quality Assessment
July 16, 2025
Global
Administration
Overview of the data contained in the platform by category, from STIX object types to entity classifications. It also includes metrics on platform activities.
From version : 6.5.0
PUBLISHED
Lucas Guiglionia
[Administration] Data Ingested
July 16, 2025
Global
Administration
Assess the volume of ingested data for each entity type, providing insights into intelligence coverage.
From version : 6.5.0
PUBLISHED
Jermain Njemanze
Monitoring Ransomware Activity
July 16, 2025
Threat monitoring
ransomware
map widget
Detection & prevention sources
A dashboard to monitor ransomware activity sighted in your network.
From version : 6.5.0
PUBLISHED
Damian Skeeles
[SIEM] Splunk Feed
July 16, 2025
This dashboard shows a similar widget field and layout to the widgets in the OpenCTI Splunk Add-on as published in Splunkbase
From version : 6.6.17
PUBLISHED

OpenCTI Custom Dashboards Library

A simple dashboard providing key insights into the knowledge base.

This dashboard provides an overview of platform activity. It highlights key metrics for monitoring user behavior and detecting suspicious actions, with a dedicated focus on administrator activity and unusual patterns.

A strategic dashboard that shows threats facing the Technologies sector, one of a series of sector-focused dashboards. It includes overviews of Actors, Malware, TTPs and Vulnerabilities reported to be targeting organisations in the sector.

A strategic dashboard that shows threats facing the Defense sector, one of a series of sector-focused dashboards. It includes overviews of Actors, Malware, TTPs and Vulnerabilities reported to be targeting organisations in the sector.

A beginner dashboard illustrating metrics about threat data and threat intelligence related to the Energy sector and its sub-sectors.

An advanced dashboard giving you a full overview of threat activities against Energy sector and its subsectors (Oil, Gas, Nuclear, Renewable energies, Electricity). This Dashboard can be adapted to cover other Sectors.

Advanced dashboard with full overview of threat activities against Health sector and its subsectors (Hospital, Research, Services, Manufacturing, Pharmacy). Can be adapted to cover other Sectors.

More complete Dashboard than the Default one giving details on qualified Intelligence in the platform and letting experiment with more widgets and data sources.

Monitor your Security Operations in the context of Incident management. Requires integrations with security systems able to feed OpenCTI with alerts and incidents.

Assess vulnerabilities that could affect your assets, with a view of criticality/severity, evaluate who is exploiting these vulnerabilities and how, and finally, project into the future with a view of the vulnerabilities.

A dashboard for monitoring vulnerability exploitation. It provides an overview of new vulnerabilities, exploitation volume, threats involved, associated TTPs, and more.

Overview of the data contained in the platform by category, from STIX object types to entity classifications. It also includes metrics on platform activities.

Assess the volume of ingested data for each entity type, providing insights into intelligence coverage.

A dashboard to monitor ransomware activity sighted in your network.

This dashboard shows a similar widget field and layout to the widgets in the OpenCTI Splunk Add-on as published in Splunkbase