Add an IoC to an attack mode/method

In addition to importing indicators as STIX data, you can add IoCs to an attack mode/method manually.

시작하기 전에

Role required: sn_ti.admin

프로시저

1. Navigate to All > Threat Intelligence > IoC Repository > Attack Mode/Method.
2. Click the attack mode to which you want to add an IoC.
3. Click the Related Indicators related list.
4. Click Edit.
5. As needed, use the filters to locate the IoC you want to add.
6. Using the slushbucket, add the IoC to the Related Indicators list.
7. Click Save.

관련 태스크

• Define an attack mode/method
• Add a related attack mode method
• Add associated task to an attack mode/method