Add associated tasks to an IoC
task brazil Updated Sep 10, 2026 1 min read t_AddAssociatedTasksToIoC.md
In addition to importing associated tasks (such as changes and incidents) as STIX data, you can add them to an IoC manually.
Before you begin
Role required: sn_ti.write
Procedure
-
Navigate to All > Threat Intelligence > IoC Repository > Indicators.
-
Click the IoC to which you want to add an associated task.
-
Click the Associated Tasks related list.
-
Click Edit.
-
As needed, use the filters to locate the tasks you want to associate with the IoC.
-
Using the slushbucket, add the task to the Associated Tasks list.
-
Click Save.
Parent Topic:Indicators of compromise
Related topics
Add a related observable to an IoC
Add a related attack mode/method to an IoC
53 lines · 1.5 KB
--- title: Add associated tasks to an IoC description: In addition to importing associated tasks \(such as changes and incidents\) as STIX data, you can add them to an IoC manually. locale: en-US canonical_url: https://www.servicenow.com/docs/r/security-management/t\_AddAssociatedTasksToIoC.html release: brazil topic_type: task last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Indicators of compromise, IoC Repository, Threat Intelligence, Enterprise security case management applications, Security Operations] --- # Add associated tasks to an IoC In addition to importing associated tasks \(such as changes and incidents\) as STIX data, you can add them to an IoC manually. ## Before you begin Role required: sn\_ti.write ## Procedure 1. Navigate to **All** > **Threat Intelligence** > **IoC Repository** > **Indicators**. 2. Click the IoC to which you want to add an associated task. 3. Click the **Associated Tasks** related list. 4. Click **Edit**. 5. As needed, use the filters to locate the tasks you want to associate with the IoC. 6. Using the slushbucket, add the task to the **Associated Tasks** list. 7. Click **Save**. **Parent Topic:**[Indicators of compromise](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/c_IoCs.md) **Related topics** [View an IoC]() [Add a related observable to an IoC]() [Add a related attack mode/method to an IoC]() [Identify associated indicator types]() [Identify indicator sources]()
| title | Add associated tasks to an IoC |
| description | In addition to importing associated tasks \(such as changes and incidents\) as STIX data, you can add them to an IoC manually. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/security-management/t\_AddAssociatedTasksToIoC.html |
| release | brazil |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | Indicators of compromiseIoC RepositoryThreat IntelligenceEnterprise security case management applicationsSecurity Operations |