Deleting threat intelligence library records

  • Versão de lançamento: Australia
  • Atualizado 12 de mar. de 2026
  • 1 min. de leitura

    • Delete threat intelligence library records such as observables, indicators, and objects.

    Antes de Iniciar

    Role required: sn_sec_tisc.analyst

    The following example procedure explains how to delete an observable record. You can use the same procedure to delete indicators or objects as well.

    Procedimento

    1. Navigate to Workspaces > Threat Intelligence Security Center > Threat Intel Library > Observables > All Observables.
    2. Open any observable record.
    3. Select Delete to delete the aggregated record.
      When you select this action, then it will remove all the related records, except the original source data, and trigger reaggregation.

      A confirmation message will appear to verify that you want to delete the aggregated record. If you also want to delete the source records and prevent re aggregation, select the Delete Source Records check box. This action will remove all the associated source records.

      Delete library records
    4. Select Delete.
      The record will be deleted from threat intelligence library.

    O que Fazer Depois

    Refer to the section Define an Observable to create a record.