Define indicator-observable relationships

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 1분
  • Define relationships between the indicator object and other SDOs.

    시작하기 전에

    Role required: sn_sec_tisc.analyst

    프로시저

    1. Navigate to Workspaces > Threat Intelligence Security Center.
    2. Click on Threat Intel Library icon on the workspace.
    3. Go to Relationships > Indicator-Observable.
    4. Click New.
    5. Complete the fields in the form as appropriate.
      FieldDescription
      Observable Select and define the observable.
      Indicator Select and define the indicator object.
    6. Click Submit.