Define object-observable relationships

  • リリースバージョン: Australia
  • 更新日 2026年03月12日
  • 所要時間：1分

    • Define relationships between SDOs and the observable object (SCO).

    始める前に

    Role required: sn_ti.admin

    手順

    1. Navigate to All > Threat Intelligence > IoC Repository > Object-Observable-Relationships.
    2. Click New.
    3. Complete the fields in the form as appropriate.
      FieldDescription
      Object Select and define the source object.
      Type Enter a descriptive name to identify the object type.
      Observable Select and define the observable.
      Relationship Type A description that provides more details and context about the relationship type.
      Source Specifies the threat source from which this record is created.
      Source ID Uniquely identifies the source object.
    4. Click Submit.