Deleting threat intelligence library records

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 1분

    • Delete threat intelligence library records such as observables, indicators, and objects.

    시작하기 전에

    Role required: sn_sec_tisc.analyst

    The following example procedure explains how to delete an observable record. You can use the same procedure to delete indicators or objects as well.

    프로시저

    1. Navigate to Workspaces > Threat Intelligence Security Center > Threat Intel Library > Observables > All Observables.
    2. Open any observable record.
    3. Select Delete to delete the aggregated record.
      When you select this action, then it will remove all the related records, except the original source data, and trigger reaggregation.

      A confirmation message will appear to verify that you want to delete the aggregated record. If you also want to delete the source records and prevent re aggregation, select the Delete Source Records check box. This action will remove all the associated source records.

      Delete library records
    4. Select Delete.
      The record will be deleted from threat intelligence library.

    다음에 수행할 작업

    Refer to the section Define an Observable to create a record.