Managing the Company Whitelist

Updated 5 months ago by Elvis Hovor

The company whitelist is the list of IOCs that will never be processed for your organization's users. Whitelisting applies to the Constellation view of reports and the Constellation view of IOCs and to correlation counts. This feature does not support the use of wildcards or CIDR blocks.

Related Link: Whitelisting IOCs

Modifications to the whitelist
- affect all users in your organization
- are applied retroactively

Viewing the Company Whitelist

  1. Click the User Settings icon on the Navigation bar.
  2. Select Settings from the popup menu.
  3. Click Whitelist in the left hand side list. You now see the company whitelist.

Editing the Company Whitelist

When viewing the company whitelist, you can add terms to any section.

  1. Click the plus-sign button directly below the Company Whitelist heading.
  2. In the Add Entity popup, type the IOC information you want to whitelist.
  3. Click Save to add the term to the company whitelist.

Bulk Uploading to the Whitelist

You can use copy and paste to add a group of terms to the whitelist.

  1. Click the Bulk Upload button directly below the Company Whitelist heading.
  2. In the Bulk Upload popup, paste the terms you want to add to the whitelist. Each terms must be on a separate line, as shown below.
  3. Click Save to add the terms to the company whitelist.

Deleting Whitelisted Terms

While viewing the company whitelist, you can delete any single term by clicking on the trashcan icon on the right side of the entry.

Removing All Whitelisted Terms

To remove the entire whitelist, click the Clear All button.

Clear All will remove all IOCs from the company whitelist. There is no undo for this command.


How Did We Do?