Link Threat Intel Related Records

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • Link the records that are related to the corresponding threat intelligence objects.

    Before you begin

    Role required: sn_sec_tisc.analyst

    Procedure

    1. Navigate to Workspaces > Threat Intelligence Security Center > Threat Intel Library > Observables > All Observables.
    2. Select any observable(s) record as an example.
    3. Go to Related Records section.
    4. Select any related record.
    5. Click Link.
      The Link Objects dialogue box is displayed.
    6. Select the objects from the list and click Link button.
      The objects associated for an observable record will be linked and displayed in the Related Records list view.
    7. Click Save.
      Click Unlink button to unlink the objects