You can add tags to Indicators to aid in investigations or to make filtering and sorting easier for your organization's workflow. .
- Click on an IOC in the IOC list view. This opens up the IOC Constellation view for that single Indicator.
- Click the plus sign to the right of the word Tags in the Details panel.
- In the Manage Indicator Tags dialog box, add the desired tag(s) to the Indicator. Tags are automatically saved as soon as you enter them.
- To exit the Manage Indicator Tags popup, click anywhere in the TruSTAR window.
The new tags are now displayed just below Tags.