Source Intel
Source Intel allows you to create Threat Intelligence based off of specific sources– for now, this works only with Telegram Channels. Discovered a channel that's interesting to you but don't have the time to figure out what was discussed? Source Intel can help you summarize it quickly.
We've created a new tab in Collection, called Source Coverage. Source Coverage displays all of the Telegram channels we're actively monitoring, and it's dynamically updated. You can search for specific Telegram channels, view the number of Recent Messages, and sort by Last Activity to see which channels were most recently active.
When searching, we're not able to sort by Recent Messages. This will be resolved in a future update.
You can click on the ... next to any channel to create Source Intel, or click on a channel and click the Create Source Intel button. We'll pre-fill the name of the Intel for you using the channel name, and you can set the range of time that you want the summary to cover.
For now, summaries are limited up to one week in the past.
Source Intel will be processed and stored under Threat Flow → Intel. It can take some time depending on the date range selected. Once completed, our Source Intel will display metadata, a short executive summary, the key highlights of the topics discused, and any TTPs and CVEs mentioned.
If you're looking for a specific source or list of sources you'd like to see included in Flare, use the Submit a Collection Request button on the Source Coverage tab.
