Run Publish to Watchlist Publish to Watchlist takes observables or associated indicators and publishes them to a third-party watchlist. Before you beginRole required: sn_si.analyst About this task Note: If no implementations are available, capability actions are not displayed in product menus. The Security Operations Integration - Publish to Watchlist workflow is triggered from the related list on a security incident. The following example is for observables. Procedure Navigate to a security incident. Select Observables from the Related List tab. Click Publish to Watchlist in the Actions on selected rows... drop-down menu. The dialog box appears. Enter or choose the implementation. Click Submit.