Confirm Potential Relationships from Related Records

Confirm the relationships between the two SDOs.

Before you begin

Role required: sn_sec_tisc.analyst

Procedure

1. Navigate to Workspaces > Threat Intelligence Security Center.

2. Click on Threat Intel Library icon on the workspace.

3. Go to Related Records section.

4. Expand Potential Relationships.

5. Open any record such observables, indicators, or any other objects that you wish to confirm the relationships between two SDOs.

6. For example, here select Observables from the left navigation.

7. Select the Observable(s) records from the list.

   Note: The list section shows all the linked observable records of the associated observable.

8. Click Confirm Relationships button to confirm the relationships between the objects.

   Note: For more information, seeRelationships Objects and Potential Relationships.

1. Click Delete to delete the associated observables.

   For information on how the potential relationships and relationships are established between the SDOs, see Potential Relationships and Relationships Objects.

Parent Topic:Threat Intel Library

Related topics

TISC Data Model

TISC Library Objects form view

TISC Library Repository

Access Vulnerability Downstream actions

Deleting threat intelligence library records

Export intelligence data

Automated Correlation