Create a new indicator
Manually create a new indicator in the system.
Create an incident from the selected indicators and populate relevant incident fields with indicator data.
Edit a single indicator or select multiple indicators to perform a bulk edit.
Delete and Exclude
Delete and exclude one or more indicators from all indicator types or from a subset of indicator types.
If you select the
Do not add to exclusion listcheck box, the selected indicators are only deleted.
Export the selected indicators to a CSV file. You can Export an Indicator to CSV Using the UTF8-BOM Format.
Export the selected indicators to a STIX file.
Upload a STIX file
Upload a STIX file and add the indicators from the file to the system.
The type of the indicator, such as File, Email, etc.
The reputation of the indicator: None, Good, Suspicious, or Bad.
Searches for indicators based on a reliability score such as “A - Completely reliable”.
Indicator feed or enrichment integrations.
A specific instance of an indicator feed or enrichment integration.
The source (script, manual, etc.) which last set the indicator's expiration status.
Tags applied to indicators.
Search for keywords within indicators’ comments.
Whether the indicator is shared to tenant accounts (multi-tenant only).