Confirm Potential Relationships from Related Records

task brazil Updated Sep 10, 2026 2 min read confirm-potential-relationships.md
Raw file servicenow.com

Confirm the relationships between the two SDOs.

Before you begin

Role required: sn_sec_tisc.analyst

Procedure

  1. Navigate to Workspaces > Threat Intelligence Security Center.

  2. Click on Threat Intel Library icon on the workspace.

  3. Go to Related Records section.

  4. Expand Potential Relationships.

  5. Open any record such observables, indicators, or any other objects that you wish to confirm the relationships between two SDOs.

  6. For example, here select Observables from the left navigation.

  7. Select the Observable(s) records from the list.

    Note: The list section shows all the linked observable records of the associated observable.

  8. Click Confirm Relationships button to confirm the relationships between the objects.

    Note: For more information, seeRelationships Objects and Potential Relationships.

    [Omitted image "tisc-confirm-relationships-related-records.png"] Alt text: Related Records-Potential Relationships

  9. Click Delete to delete the associated observables.

    For information on how the potential relationships and relationships are established between the SDOs, see Potential Relationships and Relationships Objects.

Parent Topic:Threat Intel Library

Related topics

TISC Data Model

TISC Library Objects form view

TISC Library Repository

Access Vulnerability Downstream actions

Deleting threat intelligence library records

Export intelligence data

Automated correlation

Keywords confirm potential relationshipsrelated recordsSDO relationships
Search documentation
Search document titles and file paths on the brazil branch