Thank you for your feedback.
Form temporarily unavailable. Please try again or contact docfeedback@servicenow.com to submit your comments.
Versions
  • London
  • Kingston
  • Jakarta
  • Istanbul
  • Helsinki
  • Geneva
  • Store
Close
Home Kingston Security Incident Management Security Operations Threat Intelligence Indicators of Compromise (IoC) Add a related attack mode/method to an IoC
  • Versions
  • Products

Contents

Add a related attack mode/method to an IoC

SAVE AS PDF
Other

Add a related attack mode/method to an IoC

In addition to importing related attack modes/methods as STIX data, you can add related attack modes/methods to an IoC manually.

Before you begin

Role required: sn_ti.write

Procedure

  1. Navigate to Threat Intelligence > IoC Repository > Indicators.
  2. Click the indicator to which you want to add a related attack mode/method.
  3. Click the Related Attack mode/method related list.
  4. Click Edit.
  5. As needed, use the filters to locate the attack mode/method you want to relate with the IoC.
  6. Using the slushbucket, add the attack mode/method to the Related Attack mode/method list.
  7. Click Save.

Changes to site functionality will be made starting around 6am on January 21st (Pacific Time) and lasting approximately 6 hours.  The site may be intermittently unavailable.