Add a related observable to an IoC

  • Versão de lançamento: Australia
  • Atualizado 12 de mar. de 2026
  • 1 min. de leitura
  • In addition to importing observables as STIX data, you can add related observables to an IoC manually.

    Antes de Iniciar

    Role required: sn_ti.write

    Procedimento

    1. Navigate to All > Threat Intelligence > IoC Repository > Indicators.
    2. Click the indicator to which you want to add a related observable.
    3. Click the Related Observables related list.
    4. Click Edit.
    5. As needed, use the filters to locate the observable you want to relate with the IoC.
    6. Using the slushbucket, add the observable to the Related Observables list.
    7. Click Save.