You can select a single or multiple observables and apply security annotations to them using the Actions on selected rows choice menu.

Before you begin

  • Requires the Threat Intelligence plugin and activation. The Threat Intelligence plugin is available as a separate subscription.
Role required: admin

Procedure

  1. Navigate to All > Threat Intelligence > Observables
  2. Select one or more observables in the list.
  3. From the Actions on selected rows drop-down menu, choose Add security annotation.
    Creating multiple security annotations for observables.
  4. Enter an annotation.
    Annotations can be in any text format.
  5. Click Submit.