Thank you for your feedback.
Form temporarily unavailable. Please try again or contact to submit your comments.
  • London
  • Kingston
  • Jakarta
  • Istanbul
  • Helsinki
  • Geneva
  • Store

Identify observable sources

Identify observable sources

If an observable has no sources defined, it uses all types of sources. However, if you add one or more threat sources to an observable, it limits the sources used.

Before you begin

Role required: sn_ti.admin


  1. Navigate to Threat Intelligence > IoC Repository > Observables.
  2. Click the observable to which you want to add observable sources.
  3. Click the Observable Sources related list.
  4. Click Edit.
  5. As needed, use the filters to locate the source you want to associate with the observable.
  6. Using the slushbucket, add the observable source to the Observable Sources list.
  7. Click Save.

Changes to site functionality will be made starting around 6am on January 21st (Pacific Time) and lasting approximately 6 hours.  The site may be intermittently unavailable.