Tagging Indicators
You can add tags to Indicators to aid in investigations or to make filtering and sorting easier for your organization's workflow. .
- Click on an IOC in the IOC list view. This opens up the IOC Constellation view for that single Indicator.
- Click the plus sign to the right of the word Tags in the Details panel.
- In the Manage Indicator Tags dialog box, add the desired tag(s) to the Indicator. Tags are automatically saved as soon as you enter them.
- To exit the Manage Indicator Tags popup, click anywhere in the TruSTAR window.
The new tags are now displayed just below Tags.
Indicator tags do not correlate with Report tags in the constellation view.
