Tagging Indicators

Updated 8 months ago by TruSTAR

You can add tags to Indicators to aid in investigations or to make filtering and sorting easier for your organization's workflow.

  1. Click on an item in the IOC list view. This opens up the Graph view for that item.
  2. Click the plus sign to the right of the word Tags in the Details panel.
  3. In the Manage Indicator Tags dialog box, add the desired tag(s) to the Indicator. Tags are automatically saved as soon as you enter them.
  4. To exit the Manage Indicator Tags popup, click anywhere in the TruSTAR window.

The new tags are now displayed just below Tags.

Indicator tags do not correlate with Report tags in the constellation view.

Adding MITRE ATT&CK Framework tags

How Did We Do?