Thank you for your feedback.
Form temporarily unavailable. Please try again or contact to submit your comments.
  • London
  • Kingston
  • Jakarta
  • Istanbul
  • Helsinki
  • Geneva
  • Store

Add an IoC to an attack mode/method

Add an IoC to an attack mode/method

In addition to importing indicators as STIX data, you can add IoCs to an attack mode/method manually.

Before you begin

Role required: sn_ti.admin


  1. Navigate to Threat Intelligence > IoC Repository > Attack Mode/Method.
  2. Click the attack mode to which you want to add an IoC.
  3. Click the Related Indicators related list.
  4. Click Edit.
  5. As needed, use the filters to locate the IoC you want to add.
  6. Using the slushbucket, add the IoC to the Related Indicators list.
  7. Click Save.

Changes to site functionality will be made starting around 6am on January 21st (Pacific Time) and lasting approximately 6 hours.  The site may be intermittently unavailable.