Share observables from a security incident

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 13일
  • 소요 시간: 1분

    • Observables can be shared from a security incident in Security Incident Response to members in your trusted circle.

    시작하기 전에

    Role required: sn_si.analyst

    프로시저

    1. Navigate to a security incident.
    2. Select the Observables tab from Show IoC Related List group.
    3. Click on an observable.
    4. On the Observable form click the Share observable related link.
      The Observable Share dialog box appears.
      Share Observable dialog box
    5. Enter a Name for this threat share record.
    6. Enter a Descriptionof the selected observables.
    7. Choose Circles to share the observables with.
    8. Click Submit.
      The observable(s) are shared with the specified Trusted Circle.
    9. You can view the threat share records by clicking the Threat shares tab.
    10. If any of the shared observables contain sightings, the sightings are also shared and can be viewed by clicking the Sightings tab.