Define object-indicator relationships

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 1분

    • Define relationships between the indicator object and other SDOs.

    시작하기 전에

    Role required: sn_ti.admin

    프로시저

    1. Navigate to All > Threat Intelligence > IoC Repository > Object-Indicator-Relationships.
    2. Click New.
    3. Complete the fields in the form as appropriate.
      FieldDescription
      Object Select and define the object.
      Type Specifies the object type based on the object you selected.
      Indicator Select the indicators of compromise.
      Relationship Direction Define the relationship direction whether it is direct or inverse.
      Relationship Type A description that provides more details and context about the relationship type.
      Source Specifies the threat source from which this record is created.
      Source ID Uniquely identifies the source object.
    4. Click Submit.