Add a related observable

In addition to importing observables as STIX data, you can add related observables manually.

시작하기 전에

Role required: sn_ti.admin

프로시저

1. Navigate to All > Threat Intelligence > IoC Repository > Observables.
2. Click the observable to which you want to add a related observable.
3. Click the Child Observables related list.
4. Click Edit.
5. As needed, use the filters to locate the observable you want to relate to the current one.
6. Using the slushbucket, add the observable to the Child Observables list.
7. Click Save.

관련 태스크

• Define an observable
• Add a related IoC to an observable
• Add associated tasks to an observable
• Load more IoC data
• Identify observable sources
• Perform lookups on observables
• Perform threat enrichment on observables