Reference:
https://www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa- firepower-module-user-guide-v541/Intrusion-Global-Threshold.html

Reference:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Netwo

Section: Deployment

To block traffic to known cryptomining networks using Cisco Secure Firewall Threat Defense (FTD) managed by Cisco Secure Firewall Management Center (FMC), the network administrator needs to configure Security Intelligence in an Access Control Policy. Security Intelligence allows administrators to block traffic based on threat intelligence feeds, which include known malicious IP addresses, domains, and URLs.
Steps:
* Navigate to Policies > Access Control > Access Control Policy in FMC.
* Edit or create an Access Control Policy.
* Go to the Security Intelligence tab.
* Enable the relevant threat intelligence feeds that include cryptomining networks.
* Apply the policy to the FTD device.
This configuration ensures that traffic to known cryptomining networks is blocked, enhancing the network's security posture against cryptomining threats.
References: Cisco Secure Firewall Management Center Configuration Guide, Chapter on Security Intelligence.

Explanation
The casebook and pivot menu are widgets available in Cisco Threat Response. Casebook - It is used to record, organize, and share sets of observables of interest primarily during an investigation and threat analysis. You can use a casebook to get the current verdicts or dispositions on the observables.
https://www.cisco.com/c/en/us/td/docs/se
curity/ces/user_guide/esa_user_guide_13-5-1/b_ESA_Admin_Guide_ces
_13-5-1/b_ESA_Admin_Guide_13-0_chapter_0110001.pdf