Add a related observable

In addition to importing observables as STIX data, you can add related observables manually.

Before you begin

Role required: sn_ti.admin

Procedure

1. Navigate to All > Threat Intelligence > IoC Repository > Observables.

2. Click the observable to which you want to add a related observable.

3. Click the Child Observables related list.

4. Click Edit.

5. As needed, use the filters to locate the observable you want to relate to the current one.

6. Using the slushbucket, add the observable to the Child Observables list.

7. Click Save.

Parent Topic:Observables

Related topics

Define an observable

Add a related IoC to an observable

Add associated tasks to an observable

Load more IoC data

Identify observable sources

Perform lookups on observables

Perform threat enrichment on observables