[Sector] Quick Knowledge

[Sector] Quick Knowledge is a custom OpenCTI dashboard built to give analysts and stakeholders an at-a-glance understanding of the threat landscape affecting a specific industry sector, without needing to navigate through multiple tabs.

The layout is organized into three thematic sections:

• High Level Indicators & Active Threats: instant counters covering reports about the sector, threat actors/intrusion sets and campaigns targeting it, and malware count, paired with ranked visualizations of the top 20 threats and top 20 malware targeting the sector, a heatmap of subsector targeting, a map of top targeted countries, a breakdown of threats by region, a radar chart of top MITRE ATT&CK techniques, and top exploited vulnerabilities.
• Recent Activities: a chronological timeline of the most recent campaigns targeting the sector, alongside donut and bar-chart views of reports about the sector.
• Technical Information: signatures and sightings context, including radar and donut charts of indicators tagged with the sector's label, a line chart of indicators related to threats over time, and a distribution of attack patterns from related reports.

This view is designed to be used as a quick-reference briefing tool for sector-level threat landscape assessments. It's ideal for Analysts and Customer-facing teams who need to rapidly understand who is threatening a given industry, with what tools and techniques, and how recently, during demos, investigations, or executive briefings.