The Threat Classification Guide provides an online reference available within the Cloud Services Portal defining the common threat intelligence data classification groups and the specific properties for the groups.
This is an online guide available within the Cloud Services Portal under the Research menu on the Resource page (Cloud Services Portal > Research > Resources). Note: Do not click on the breadcrumb link at the top of this page. It does not link to the Cloud Service Portal.
Viewing the Threat Classification Guide
To view the online Threat Classification Guide, perform the following:
- From the Cloud Services Portal, click Research > Resources. See screen shot, encircled items 1 and 2 for additional information. Note: Do not click on the Resources breadcrumb link located at the top of this page.
- On the Resources page within the Cloud Services Portal, click Classifications Guide in the top menu. See screenshot, encircled item 3 for additional information. Classification types are as follows:
- Suspicious
- Uncategorized Threat
- Undefined
- Whitelist
- Reserved. The "Reserved" type applies to Class and Property descriptions where the records or data detected are from a domain resolving to a Bogon IP address which has been externally pulled from the Bogon data or feeds.
- Reserved classification types definition under the Classification Guide but not seeing any “Reserved”.
3. On the Threat Classification Guide page, an alphabetized list of threat classification groups along with their properties is displayed. Clicking on the 
icon associated with a threat classification group will expand a panel displaying information on the property, and a description for the selected threat class. Clicking on the
icon will minimize the panel.