Potential Relationships

---
title: Potential Relationships
description: The application uses automated correlation to establish potentially possible relationships between two SDOs, two Observables or an observable and SDO.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/potential-relationships.html
release: australia
product: Threat Intelligence Security Center
classification: threat-intelligence-security-center
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 2
keywords: [potential relationships, automated correlation, SDO relationships]
breadcrumb: [TISC Library Repository, Threat Intel Library, Use, Threat Intelligence Security Center, Security Operations]
---

# Potential Relationships

The application uses automated correlation to establish potentially possible relationships between two SDOs, two Observables or an observable and SDO.

1.  Select one or more potentially related records and apply this action on the UI, which will further change the records to the confirmed relationships and visible in Related records section.
2.  Any confirmed correlations ingested or manually created by an analyst will override the potential relationships created by auto correlation.

-   **[Confirm observable-observable potential relationship](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/define-observable-observable-potential-relationship.md)**  
Use this section to confirm the relationships between the observables.
-   **[Confirm object-object potential relationships](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/define-object-object-potential-relationships.md)**  
Define the potential relationships between the objects.
-   **[Confirm indicator-indicator potential relationships](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/define-indicator-indicator-potential-relationships.md)**  
Define the potential relationships between the objects.

**Parent Topic:**[TISC Library Repository](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-ioc.md)

**Related topics**  


[Observables]()

[Indicators]()

[Threat Entities]()

[Other Objects]()

[Vulnerability Artifacts]()

[View RSS Feeds]()

[Working with Reports in TISC]()

[MITRE-ATT&CK repository]()

[Relationships Objects]()

[Vulnerability relationship mapping]()