Overview of the Vulnerability

This custom view is designed to give analysts a comprehensive, at-a-glance overview of a specific vulnerability within OpenCTI. It is organized into four thematic sections:

1. Overview

Displays key counters summarizing the threat landscape around the vulnerability:

• Number of Threat Actors (groups, individuals, and intrusion sets)
• Number of Malware families
• Number of Related Reports
• Number of Related Software entities linked to it

2. Threat Actors & Malware

Provides visual breakdowns through horizontal bar charts showing:

• The top Intrusion Sets exploiting the vulnerability
• The top Malware families leveraging it
• The Attack Techniques (TTPs) associated with it, mapped to MITRE ATT&CK Attack Patterns

3. Software & Infrastructure

Lists the affected entities linked to the vulnerability:

• Affected Software via relationship distribution
• Affected Infrastructures and Systems, helping analysts quickly assess the exposure surface

4. Reports & Intelligence

Surfaces the latest intelligence around the vulnerability:

• Latest Reports referencing the vulnerability
• Report Sources (Authors) displayed as a donut chart, enabling analysts to evaluate the breadth and origin of available intelligence coverage

---

This view is intended to be used as an entity-level custom dashboard pinned to Vulnerability objects in OpenCTI, giving both technical analysts and threat intelligence teams a unified, structured view of the vulnerability's context and exploitation landscape.