Sharing Saved TQL Queries

Overview

TQL is a proprietary SQL-based query language used within the ThreatConnect threat intelligence platform (TIP). Users have the ability to save their queries for use across the platform. As we expanded the areas of use for saved TQL queries, customers began to request the ability to share saved queries with colleagues and with their larger organization.

Created while working at ThreatConnect

Saved queries dropdown menu behavior specifications

Create query dialog states and specifications

Edit query dialog states and specifications

Edit shared query dialog and specifications

Details

Design

Whilst working on the primary ask for the ability to share saved queries, we also took the initiative to improve the way users can interact with their saved and now shared queries. To prevent context-switching where possible, we introduced the ability to edit queries within the context that users are utilizing their queries. To avoid unnecessary clutter to the UI we designed the feature such that users will need to explicitly decide on which queries they want to share with their organization vs which queries would be kept private. Any shared queries would remain editable by the original query creator as well as the Organization admin.