Potential Relationships

The application uses automated correlation to establish potentially possible relationships between two SDOs, two Observables or an observable and SDO.

1. Select one or more potentially related records and apply this action on the UI, which will further change the records to the confirmed relationships and visible in Related records section.

2. Any confirmed correlations ingested or manually created by an analyst will override the potential relationships created by auto correlation.

3. Confirm observable-observable potential relationship
   Use this section to confirm the relationships between the observables.

4. Confirm object-object potential relationships
   Define the potential relationships between the objects.
5. Confirm indicator-indicator potential relationships
   Define the potential relationships between the objects.

Parent Topic:TISC Library Repository

Related topics

Observables

Indicators

Threat Entities

Other Objects

Vulnerability Artifacts

View RSS Feeds

Working with Reports in TISC

MITRE-ATT&CK Repository

Relationships Objects

Vulnerability relationship mapping