What is the best practice for creating custom content?

The best practice for custom content creation occurs in your library. In ThreatModeler v5.4.1, all the out-of-the-box libraries - AWS, Azure, GCP, and ThreatModeler - are accessible to all the user authorizations except superuser, as the content updater tool from ThreatModeler will affect all the changes by the users in these four libraries.

We recommend you copy the threat framework entities that require customization to your default library. You are able to add/modify the threat intelligence to any threat framework entity in your library without having an effect on future ThreatModeler content updates.