Tagging IOCs
You can add tags to IOCs to aid in investigations or to make filtering and sorting easier for your organization's workflow. .
- Click on an IOC in the IOC list view. This opens up the IOC Constellation view for that single IOC.
- Click the plus sign to the right of the word Tags in the Details panel.
- In the Manage Indicator Tags dialog box, add the desired tag(s) to the IOC. Tags are automatically saved to the IOC as soon as you enter them.
- To exit the Manage Indicator Tags popup, click anywhere in the TruSTAR window.
The new tags are now displayed just below Tags.
Indicator tags do not correlate with Report tags in the constellation view
