Feature: ability to create an Indicator

threatgrid / ctia-ui

A web-based interface to a Cisco Threat Intel API instance

5 stars 2 forks source link

Feature: ability to create an Indicator #4

Open oakmac opened 8 years ago

oakmac commented 8 years ago

Below is the current Indicator form: indicator-form-1

Questions:

Are there any missing input elements?
Are there are extra input elements?
Is the order / priority of the input elements optimal?
Are all of the input elements appropriate for their matching schema values? ie: text fields for string, dropdowns for vocabularies, etc
Is there anything that could be changed to improve functionality or usability? ie: hide some elements by default, show tooltips in certain areas, etc

oakmac commented 8 years ago

The Judgement form is "embedded" in the Indicator form in such a way that makes the form much longer than necessary. This was done for demo purposes, and is almost certainly not what we want to do moving forward.

There was some brief discussion around using a modal experience to create a Judgement "on-the-fly" on this page. Probably worth some more discussion.

craigbro commented 8 years ago

The Judgement form should be removed.

Otherwise looks good.

craigbro commented 8 years ago

I think we could remove the Specification bit, since we don't support any specifications in indicators right now.