Data privacy

When searching or matching reports using the Intelligence interface, the returned reports are assigned one of the following confidentiality levels:

Private reports

You cannot view private reports. These reports will not be part of the returned list of reports. However, private reports are included in the analytical view provided by the search service. By default all reports are private.

Public reports

Public reports are analysis reports regarding samples from openly shared threat intelligence databases. These reports are openly returned to you both in the list of reports and in the analytical view provided by the search service.

User-visible reports

User-visible reports are those private reports associated with samples that you submitted. You thus obtain access to these reports that are both in the list of reports and the analytical view provided by the search service.

This privacy model guarantees that you cannot query for reports that are confidential to other customers. Analytical views are excluded from the restriction because they do not leak pointers to the confidential reports and the relevance of the results actually depends on the private reports being part of the computations.