FAQs
ShareShare is our new member intelligence sharing application that focuses on customization, automation, and three levels of intelligence (tactical, operational, and strategic).
Key features:
-
Filter alerts by category, TLP to receive only the intelligence that’s relevant to you.
-
Customized intel submission forms based on the category.
-
Automated enrichment and confidence scoring based on the IACD Framework enables you to take action on threat intelligence in real-time.
-
Our analysts connect the dots across reported objects, published in a separate container.
-
Summaries and high-level strategic reports, i.e. all activity connected with specific threat actor or malware campaign.
-
Supports STIX 2.1 and TAXII 2.1
Share completely replaces FS-ISAC Portal. Once Share goes live, you will no longer be able to access the previous FS-ISAC Portal. If you try, you will be re-directed to the Intelligence Exchange log in page.
You must set up an Intelligence Exchange account in order to access Share.
No, Share was built with the help of Cyware, whose strategic information sharing, threat platform, and security orchestration and automation technologies allow real-time automated alert curation, intel dissemination, and enhanced collaboration between FS-ISAC and members.
Eclectic IQ provides the threat intelligence platform (TIP) used by FS-ISAC's Global Intelligence Office to provide high quality analysis to members.
If you want an account but have not been provisioned one, please reach out to the membership point of contact (POC) at your firm. If you don’t know your POC, please email memberquestions@fsisac.com.
You can access Share as an application on the FS-ISAC Intelligence Exchange, which is the platform for all relevant products and services available through your FS-ISAC membership.
Powered by Cyware, users will also be able to access Share through the Cyware mobile app in a later rollout set for June.
There are multiple ways to select the information you are notified about. Select the “settings” (cog) button on the lower left-hand section of the screen.
In channels you can disable or enable either or both email and mobile notifications. This is available for “my channels” and “shared channels".
In “my categories” you can disable any or all the categories. This method is not recommended as any alerts from disabled categories (past, present, future) will no longer show in the shared channels.
Channels are collections of alerts that are automatically categorized when shared from a selected information source or having select keywords (known as tags) to users with Share accounts. They are broken down into two categories, shared channels and my channels.
Shared channels are set by FS-ISAC and contain alerts from the specified source(s).
My channels are created by the user utilizing tags to customize the alerts seen, creating channels tailored to your interest.
Automated alerts are based off the IACD framework to enrich submitted indicators. FS-ISAC was part of the trial with John Hopkins Applied Physicals Laboratory that resulted in its integration with Share. Confidence scores are assigned to each indicator and an alert with this information is published to the membership. No human analysis is conducted; the goal is to provide members with a rapid turnover of information at a base machine-to-machine level. Automated alerts will have indications in the title and body to indicate such.
Non-automated alerts are created by our analysts utilizing the data that was submitted and turned into an automated alert. However, our analysts go beyond the IACD framework to dive deeper into potential threats, contextualize the data submitted, and add the human component to intelligence that provides additional layers of value to data shared by members and other sources.
If you have questions or would like to give feedback on Share, please reach out to FS-ISAC Admin or your organization's FS-ISAC point of contact (POC). If you don't know who your organization's POC is, email memberquestions@fsisac.com.