Threat reports
concept australia Updated Sep 10, 2026 3 min read threat-reports.md
Threat Reports are collections of threat intelligence focused on one or more topics. Threat reports apply for STIX 2.x.
Threat reports include description of a threat actor, malware, attack technique, including context and related details. They are used to group-related threat intelligence together so that it can be published as a comprehensive cyber threat story.
The Threat Report SDO contains a list of references to STIX Objects along with a textual description and the name of the report.
- Define threat reports
Define threat reports that describe a threat actor, malware, attack technique, including context and related details.
Parent Topic:IoC Repository
Related topics
75 lines · 1.9 KB
--- title: Threat reports description: Threat Reports are collections of threat intelligence focused on one or more topics. Threat reports apply for STIX 2.x. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/threat-reports.html release: australia topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 3 breadcrumb: [IoC Repository, Threat Intelligence, Enterprise security case management applications, Security Operations] --- # Threat reports Threat Reports are collections of threat intelligence focused on one or more topics. Threat reports apply for STIX 2.x. Threat reports include description of a threat actor, malware, attack technique, including context and related details. They are used to group-related threat intelligence together so that it can be published as a comprehensive cyber threat story. The Threat Report SDO contains a list of references to STIX Objects along with a textual description and the name of the report. - **[Define threat reports](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/define-threat-reports.md)** Define threat reports that describe a threat actor, malware, attack technique, including context and related details. **Parent Topic:**[IoC Repository](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/ioc-repository.md) **Related topics** [Attack modes and methods]() [Indicators of compromise]() [Observables]() [Attack patterns]() [Campaigns]() [Course of actions]() [Identities]() [Infrastructure]() [Intrusion set]() [Locations]() [Malware]() [Malware analysis]() [Observed data]() [Threat actors]() [Threat groupings]() [Marking definitions]() [Threat notes]() [Threat opinions]() [Sightings]() [Tools]() [Vulnerabilities]() [Relationships]() [STIX Visualizer]()
| title | Threat reports |
| description | Threat Reports are collections of threat intelligence focused on one or more topics. Threat reports apply for STIX 2.x. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/threat-reports.html |
| release | australia |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 3 |
| breadcrumb | IoC RepositoryThreat IntelligenceEnterprise security case management applicationsSecurity Operations |