Cyber Threat Surveillance feature provides the capability to review the possible threats in the Dark Web that could indicate cyber risk in your company or users. With Cyber Threat Surveillance, the main goal is all about risk reduction, and having visibility to those risks or potential risks can put you one step ahead of the game.


This is an Add-On service that you can include in your current plan, if you're interested in getting this service talk to sales at sales@symbolsecurity.com and enable this important feature on your company(s).


How it works?

1. Define Keywords

Symbol allows you to add multiple keywords to search by. These categories need to be defined per company and the quantity will vary depending on your plan.


These are some of the keywords you could add to the list:

  • Single String (Like Company Name or Product Name)
  • Domain
  • Email
  • CCN (Credit Card Numbers)
  • SSN (Social Security Numbers)
  • IP addresses
  • Crypto Addresses

2. Get Results

Once you have defined your keywords, our application every 24 hours will be searching on the DarkWeb any result associated with the provided information. These results will be shown in the "Results" tab that is shown in the Cyber Threats view. 


Each result listed on the view will have the following information:

  • Title.
  • Threat Date.
  • Threat Content (It shows all the information extracted from the DarkWeb).
  • Status (Pending, Urgent, Resolved).
  • Keyword(s) (The keywords used to get the result).
  • Negativity. (This is a value of how likely the content could be used for criminal activity).
  • Source.

Some things to keep in mind about the results: 

  • The application will only search for results on the past 24 hours prior the search.
  • Result's content is automatically removed after 30 days.

3. Take Actions

Admins will be able to take some actions on the listed results, they could: 

  • Categorize
  • Ignore (When ignoring results, they will be automatically removed from the list).

These are some of the categories that admins can assign to each result:

  • Pending: this is the default category.

  • Urgent: would be applied when the result has negativity greater than 80%. Also, it would need to be closed out as resolved at some point by the admin.

  • Resolved: It would be a positive closure and each result marked with this category will disappear from the main list and will be sent to the "Resolved Results" list.



 Filtering Results

Once the filter button on the top right of the screen is pushed a box will open up with the options to filter the results on the results page: 

  • Categories: allows you to filter by a specific status such as pending, urgent, resolved etc.
  • period of time: allows you to pick between specific dates on the top of the box.
  • keywords: allows you to type in specific keywords to filter by.


To clear filters, there is a button right under the filters button on the top right.

The list of "Resolved Results" could be accessible by clicking on the number of resolved results that is shown at the top of the screen.