Add Observables to EDL

  • Release version: Xanadu
  • Updated October 25, 2024
  • 1 minute to read

    • Add observables such as IPs, domains, and hashes to External Dynamic List (EDLs).

    Before you begin

    Role required: sn_sec_tisc.analyst

    Procedure

    1. Navigate to Workspaces > Threat Intelligence Security Center.
    2. Click Threat Analyst Workbench icon.
    3. Go to Observables > All Observables.
    4. Open any observable record.
    5. Click Add to EDL.
      The Add to EDL modal screen is displayed.