Confirm Potential Relationships from Related Records

  • Release version: Xanadu
  • Updated August 1, 2024
  • 1 minute to read

    • Confirm the relationships between the two SDOs.

    Before you begin

    Role required: sn_sec_tisc.analyst

    Procedure

    1. Navigate to Workspaces > Threat Intelligence Security Center.
    2. Click on Threat Intel Library icon on the workspace.
    3. Go to Related Records section.
    4. Expand Potential Relationships.
    5. Open any record such observables, indicators, or any other objects that you wish to confirm the relationships between two SDOs.
    6. For example, here select Observables from the left navigation.
    7. Select the Observable(s) records from the list.
      Note:
      The list section shows all the linked observable records of the associated observable.
    8. Click Confirm Relationships button to confirm the relationships between the objects.
      Note:
      For more information, seeRelationships Objects and Potential Relationships.
      Related Records-Potential Relationships
    9. Click Delete to delete the associated observables.
      For information on how the potential relationships and relationships are established between the SDOs, see Potential Relationships and Relationships Objects.