Security Operations Integration- Publish to Watchlist capability

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read
  • The Publish to Watchlist capability adds observables and indicators associated with a security incident to a third-party watchlist that monitors for security events and generates alerts. This capability is used as part of incident response during investigations.

    Note:
    If no implementations are available, capability actions are not displayed in product menus.