Create relationships between indicators to enhance your
Indicator relationships are used to enrich
investigations with information from indicators that are connected
in various ways to other indicators. These relationships can help
you pivot from what might be a false positive to a full-fledged
You can create relationships automatically through
specific integration feeds.
To enable the automatic creation
of relationships, ensure that the
is selected in the integration settings.
In addition, you
can create relationships manually.
Navigate to the
Click on an indicator.
A window with all of the indicators in your system appears.
Enter a query by which to search for the relevant indicators.
You can optionally limit the time range by which you are searching.
Select the indicator(s) to which you want to create the
Set the relationship types. By default, the types that
are presented are