Confirm Potential Relationships from Related Records
Confirm the relationships between the two SDOs.
Before you begin
Role required: sn_sec_tisc.analyst
Procedure
-
Navigate to Workspaces > Threat Intelligence Security Center.
-
Click on Threat Intel Library icon on the workspace.
-
Go to Related Records section.
-
Expand Potential Relationships.
-
Open any record such observables, indicators, or any other objects that you wish to confirm the relationships between two SDOs.
-
For example, here select Observables from the left navigation.
-
Select the Observable(s) records from the list.
Note: The list section shows all the linked observable records of the associated observable.
-
Click Confirm Relationships button to confirm the relationships between the objects.
Note: For more information, seeRelationships Objects and Potential Relationships.
[Omitted image "tisc-confirm-relationships-related-records.png"] Alt text: Related Records-Potential Relationships
-
Click Delete to delete the associated observables.
For information on how the potential relationships and relationships are established between the SDOs, see Potential Relationships and Relationships Objects.
Parent Topic:Threat Intel Library
Related topics
TISC Library Objects form view
Access Vulnerability Downstream actions
---
title: Confirm Potential Relationships from Related Records
description: Confirm the relationships between the two SDOs.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/confirm-potential-relationships.html
release: brazil
product: Threat Intelligence Security Center
classification: threat-intelligence-security-center
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
keywords: [confirm potential relationships, related records, SDO relationships]
breadcrumb: [Threat Intel Library, Use, Threat Intelligence Security Center, Security Operations]
---
# Confirm Potential Relationships from Related Records
Confirm the relationships between the two SDOs.
## Before you begin
Role required: sn\_sec\_tisc.analyst
## Procedure
1. Navigate to **Workspaces** > **Threat Intelligence Security Center**.
2. Click on **Threat Intel Library** icon on the workspace.
3. Go to **Related Records** section.
4. Expand **Potential Relationships**.
5. Open any record such observables, indicators, or any other objects that you wish to confirm the relationships between two SDOs.
6. For example, here select **Observables** from the left navigation.
7. Select the **Observable\(s\)** records from the list.
**Note:** The list section shows all the linked observable records of the associated observable.
8. Click **Confirm Relationships** button to confirm the relationships between the objects.
**Note:** For more information, see[Relationships Objects](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/threat-intelligence-security-center/relationship-objects.md) and [Potential Relationships](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/threat-intelligence-security-center/potential-relationships.md).
\[Omitted image "tisc-confirm-relationships-related-records.png"\] Alt text: Related Records-Potential Relationships
9. Click **Delete** to delete the associated observables.
For information on how the potential relationships and relationships are established between the SDOs, see [Potential Relationships](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/threat-intelligence-security-center/potential-relationships.md) and [Relationships Objects](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/threat-intelligence-security-center/relationship-objects.md).
**Parent Topic:**[Threat Intel Library](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/threat-intelligence-security-center/threat-intelligence-security-center-library.md)
**Related topics**
[TISC Data Model]()
[TISC Library Objects form view]()
[TISC Library Repository]()
[Access Vulnerability Downstream actions]()
[Deleting threat intelligence library records]()
[Export intelligence data]()
[Automated correlation]()
| title | Confirm Potential Relationships from Related Records |
| description | Confirm the relationships between the two SDOs. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/confirm-potential-relationships.html |
| release | brazil |
| product | Threat Intelligence Security Center |
| classification | threat-intelligence-security-center |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 2 |
| keywords | confirm potential relationshipsrelated recordsSDO relationships |
| breadcrumb | Threat Intel LibraryUseThreat Intelligence Security CenterSecurity Operations |