Link nodes in the Relationship Graph

Use Relationship Graph to link the nodes. Use filters to select specific nodes to investigate.

Before you begin

Role required: sn_sec_tisc.analyst

Procedure

1. Navigate to Workspaces > Threat Intelligence Security Center > Threat Intel Library > Observables > All Observables.
2. Open a record.
3. Select the Relationship Graphs tab.
4. Select the node.
5. Select Link.
   Note:

   This action is only available at a home node level.

   
6. Select the Entity type from the list, for example, Observable.
7. Select the required entities from the list, and select Add.
   The entity is added to the node and the relationship graph displays the linking.
8. To add another Entity type, repeat steps 4-7.
9. Use the filter to select specific nodes from the list.
10. Optional: To modify a link name, select the link and select More actions > Edit.
11. Optional: To unlink the related records from the nodes, select Unlink.
12. Optional: Select Show details to see the associated observables data.