Define object-object relationships
Define relationships between SDOs, except the indicator object.
Before you begin
Role required: sn_sec_tisc.analyst
Procedure
-
Navigate to Workspaces > Threat Intelligence Security Center.
-
Click on Threat Intel Library icon on the workspace.
-
Go to Relationships > Object-Object.
-
Click New.
-
Complete the fields in the form as appropriate.
|
Field |
Description |
|---|---|
|
Source Object |
Select and define the source object. |
|
Source Object Type |
Defines the type of source object. |
|
Target Object |
Select and define the target object. |
|
Target Object Type |
Defines the type of target object. |
|
Relationship Type |
A description that provides more details and context about the relationship type.Define the relationship direction whether it is direct or inverse.
|
|
Start Time |
Specifies the time when the relationship is created. |
|
Stop Time |
Specifies the time when the relationship is stopped or removed. |
|
Description |
A brief description about the object relationships. |
Parent Topic:Relationships Objects
--- title: Define object-object relationships description: Define relationships between SDOs, except the indicator object. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/define-object-object-relationships.html release: australia product: Threat Intelligence Security Center classification: threat-intelligence-security-center topic_type: task last_updated: "2026-09-10" reading_time_minutes: 1 keywords: [object-object relationships, SDO relationships, define relationships] breadcrumb: [Relationships Objects, TISC Library Repository, Threat Intel Library, Use, Threat Intelligence Security Center, Security Operations] --- # Define object-object relationships Define relationships between SDOs, except the indicator object. ## Before you begin Role required: sn\_sec\_tisc.analyst ## Procedure 1. Navigate to **Workspaces** > **Threat Intelligence Security Center**. 2. Click on **Threat Intel Library** icon on the workspace. 3. Go to **Relationships** > **Object-Object**. 4. Click **New**. 5. Complete the fields in the form as appropriate. <table id="choicetable_sq4_yvf_wmb"><thead><tr><th align="left" id="d187287e110"> Field </th><th align="left" id="d187287e113"> Description </th></tr></thead><tbody><tr><td id="d187287e119"> **Source Object** </td><td> Select and define the source object. </td></tr><tr><td id="d187287e128"> **Source Object Type** </td><td> Defines the type of source object. </td></tr><tr><td id="d187287e137"> **Target Object** </td><td> Select and define the target object. </td></tr><tr><td id="d187287e146"> **Target Object Type** </td><td> Defines the type of target object. </td></tr><tr><td id="d187287e156"> **Relationship Type** </td><td> A description that provides more details and context about the relationship type.Define the relationship direction whether it is direct or inverse. - Inverse - This is the type of relationship between the observable and object. - Direct - This is the type of relationship between the object and observable. </td></tr><tr><td id="d187287e175"> **Start Time** </td><td> Specifies the time when the relationship is created. </td></tr><tr><td id="d187287e184"> **Stop Time** </td><td> Specifies the time when the relationship is stopped or removed. </td></tr><tr><td id="d187287e193"> **Description** </td><td> A brief description about the object relationships. </td></tr></tbody> </table>6. Click **Submit**. **Parent Topic:**[Relationships Objects](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/relationship-objects.md)
| title | Define object-object relationships |
| description | Define relationships between SDOs, except the indicator object. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/define-object-object-relationships.html |
| release | australia |
| product | Threat Intelligence Security Center |
| classification | threat-intelligence-security-center |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| keywords | object-object relationshipsSDO relationshipsdefine relationships |
| breadcrumb | Relationships ObjectsTISC Library RepositoryThreat Intel LibraryUseThreat Intelligence Security CenterSecurity Operations |