Link Threat Intel Related Records

task brazil Updated Sep 10, 2026 1 min read link-threat-intel-releated-records.md
Raw file servicenow.com

Link the records that are related to the corresponding threat intelligence objects.

Before you begin

Role required: sn_sec_tisc.analyst

Procedure

  1. Navigate to Workspaces > Threat Intelligence Security Center > Threat Intel Library > Observables > All Observables.

  2. Select any observable(s) record as an example.

  3. Go to the Related Records section.

  4. Select any related record.

  5. Select Link.

    The Link Objects dialogue box is displayed.

  6. Select the objects from the list and select Link button.

    The objects associated for an observable record will be linked and displayed in the Related Records list view.

  7. Select Save.

    Select Unlink button to unlink the objects

Parent Topic:Observables

Keywords link related recordsthreat intelligence objectsrelated records
Search documentation
Search document titles and file paths on the brazil branch