Define object-indicator relationships

Define relationships between the indicator object and other SDOs.

Before you begin

Role required: sn_ti.admin

Procedure

1. Navigate to All > Threat Intelligence > IoC Repository > Object-Indicator-Relationships.

2. Click New.

3. Complete the fields in the form as appropriate.

   Field	Description
   Object	Select and define the object.
   Type	Specifies the object type based on the object you selected.
   Indicator	Select the indicators of compromise.
   Relationship Direction	Define the relationship direction whether it is direct or inverse.
   Relationship Type	A description that provides more details and context about the relationship type.
   Source	Specifies the threat source from which this record is created.
   Source ID	Uniquely identifies the source object.

4. Click Submit.

Parent Topic:Relationships