Define object-object relationships

Define relationships between SDOs, except the indicator object.

Before you begin

Role required: sn_sec_tisc.analyst

Procedure

1. Navigate to Workspaces > Threat Intelligence Security Center.
2. Click on Threat Intel Library icon on the workspace.
3. Go to Relationships > Object-Object.
4. Click New.
5. Complete the fields in the form as appropriate.

   Field	Description
   Source Object	Select and define the source object.
   Source Object Type	Defines the type of source object.
   Target Object	Select and define the target object.
   Target Object Type	Defines the type of target object.
   Relationship Type	A description that provides more details and context about the relationship type. Define the relationship direction whether it is direct or inverse. Inverse - This is the type of relationship between the observable and object. Direct - This is the type of relationship between the object and observable.
   Start Time	Specifies the time when the relationship is created.
   Stop Time	Specifies the time when the relationship is stopped or removed.
   Description	A brief description about the object relationships.

6. Click Submit.