Remove Observables from EDL

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read

    • Remove observables from EDL.

    Before you begin

    Role required: sn_sec_tisc.analyst

    Procedure

    1. Navigate to Workspaces > Threat Intelligence Security Center.
    2. Click Threat Analyst Workbench icon.
    3. Go to Observables > All Observables.
    4. Open any observable record.
    5. Click Remove from EDL.
      The Remove from EDL modal screen is displayed.