--- title: Define threat opinions description: Define threat opinions as an assessment of the accuracy of the information in a STIX object. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/define-threat-opinions.html release: australia topic_type: task last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Threat opinions, IoC Repository, Threat Intelligence, Enterprise security case management applications, Security Operations] --- # Define threat opinions Define threat opinions as an assessment of the accuracy of the information in a STIX object. ## Before you begin Role required: sn\_ti.admin ## Procedure 1. Navigate to **All** > **Threat Intelligence** > **IoC Repository** > **Threat Opinions**. 2. Click **New**. 3. Complete the fields in the form as appropriate. |Field|Description| |-----|-----------| |**Opinion**|The producer's opinion about the STIX object.| |**Explanation**|The producer's explanation about the opinion.| |**Authors**|Specifies the name of the author \(example, an analyst\).| |**Source**|Specifies the threat source from which this record is created.| |**Source ID**|Unique identifier for this object in the threat source.| |**Created Time in Source**|Specifies the time the object is created in the source.| |**Modified Time in Source**|Specifies the time the object is modified in the source.| 4. Click **Submit**. ## What to do next Click any of the following related lists to view additional information about objects associated with the threat opinion.
| Related Links and Related Lists | Description |
|---|---|
| Show Relationships | Opens the STIX Visualizer where you can view the relationship of the STIX object.Show Relationships appears only when the object has an associated object. |
| Associated Objects | List of objects the threat opinion applies to. |
| Associated Indicators | List of indicators the threat opinion applies to. |
| Associated Observables | Lists observables associated with this object. |