If an IoC has no associated indicator types defined, it tracks all types of observables. However, if you associate one or more types of indicators to an IoC, it limits the types of observables that can be associated with the IoC.

시작하기 전에

Role required: sn_ti.write

프로시저

1. Navigate to All > Threat Intelligence > IoC Repository > Indicators.
2. Click the indicator to which you want to associate an indicator type.
3. Click the Associated Type related list.
4. Click Edit.
5. As needed, use the filters to locate the indicator type you want to associate with the IoC.
6. Using the slushbucket, add the indicator type to the Associated Type list.
7. Click Save.