Remove Observables from EDL

  • Release version: Xanadu
  • Updated October 25, 2024
  • 1 minute to read

    • Remove observables from EDL.

    Before you begin

    Role required: sn_sec_tisc.analyst

    Procedure

    1. Navigate to Workspaces > Threat Intelligence Security Center.
    2. Click Threat Analyst Workbench icon.
    3. Go to Observables > All Observables.
    4. Open any observable record.
    5. Click Remove from EDL.
      The Remove from EDL modal screen is displayed.