Potential Relationships

The application uses automated correlation to establish potentially possible relationships between two SDOs, two Observables or an observable and SDO.

1. Select one or more potentially related records and apply this action on the UI, which will further change the records to the confirmed relationships and visible in Related records section.
2. Any confirmed correlations ingested or manually created by an analyst will override the potential relationships created by auto correlation.

• Confirm observable-observable potential relationship
  Use this section to confirm the relationships between the observables.
• Confirm object-object potential relationships
  Define the potential relationships between the objects.
• Confirm indicator-indicator potential relationships
  Define the potential relationships between the objects.

関連概念

• Observables
• Indicators
• Threat Entities
• Other Objects
• Vulnerability Artifacts
• Working with Reports in TISC
• MITRE-ATT&CK Repository
• Relationships Objects
• Vulnerability relationship mapping

関連タスク

• View RSS Feeds