[Sector] Health & sub sectors.

An advanced dashboard giving you a full overview of threat activities against Health sector and its subsectors (Hospital, Research, Services, Manufacturing, Pharmacy). This Dashboard can be adapted to cover other Sectors.

Composition

The Dashboard is divided in 5 parts:

• A Title/Description with a link to reach out to the CTI team
• High Level Indicators: to have a quick overview of threat activities’ volume
• Active Threats: to have a quick overview of what are the main threats
• Recent activities: to have a quick overview of last campaigns and relevant sources
• Technical information: to see how much defensive materials are at disposal and from which providers.

Data prerequisites

As any Dashboard in OpenCTI, it relies on structured data. In order to work, your platform must have:

• Reports with entities
• relationships “targets” between threats (Threat Actor, Intrusion Set, Campaign, Malware, etc.) and Health sector and subsectors, Regions, and Vulnerabilities.
• relationships “uses” between threats (Threat Actor, Intrusion Set, Malware, etc.) and Attack Patterns and Malware
• relationships “indicates” between threats (Threat Actor, Intrusion Set, Campaign, Malware, etc.) and Indicators.
• Indicators with Labels about sectors
• marking definitions

Depending on the way your data are structured, this dashboard might need some adjustments. Please contact Filigran on Slack if you need any help!