Manage MITRE Relationships

Manage the MITRE relationships information that you imported from the MITRE TAXII collections.

Before you begin

Role required: sn_sec_tisc.analyst

Procedure

1. To view the MITRE ATT&CK Repository data, navigate to Workspaces > Threat Intelligence Security Center > Threat Intel Library > MITRE ATT&CK > Relationships.
   You can view the listed relationships.
2. Click any source object to view all the associated information.
3. Click New to manually create the MITRE ATT&CK relationships.
4. Fill in the fields appropriately.

   Table 1. Create New MITRE tools - Details

   Field	Description
   Source MITRE Object	Add the source MITRE object.
   Target MITRE Object	Add the target MITRE object.
   Source MITRE Type	Enter the source MITRE type.
   Target MITRE Type	Enter the target MITRE type.
   Relationship Type	Define relationships between objects. A description that provides more details and context about the relationship type. The available options are: Define the relationship direction whether it is direct or inverse. Inverse - This is the type of relationship between the observable and object. Direct - This is the type of relationship between the object and observable.
   Source	Select and define the source object.
   Relationship ID	Define the relationship ID.

5. Click Save.
6. To view how these objects are related, click Relationships.