Add associated task to an attack mode/method
In addition to importing associated tasks (such as changes and incidents) as STIX data, you can add them to an attack mode/method manually.
Before you begin
Role required: sn_ti.admin
Procedure
Navigate to All > Threat Intelligence > IoC Repository > Attack Mode/Method.
Click the attack mode to which you want to add an associated task.
Click the Associated Tasks related list.
Click Edit.
As needed, use the filters to locate the tasks you want to associate with the attack mode/method.
Using the slushbucket, add the task to the Associated Tasks list.
Click Save.
Parent Topic:Attack modes and methods
Related topics