Add observables to the graph
There are several ways to add observables to a graph:
In a graph: create a draft observable in the graph itself
In the Browse view
Add observables while working on a graph
Beta feature: Go to Settings > System settings and select Beta features > Enable intelligence creation on the graph.
To add an observable while in the graph view:
Click in the top navigation bar.
Select Observable from the dropdown list.
In Add observables, fill out these fields:
Field name
Description
Type*
Select an observable type.
Value*
Enter a value for this observable. This acts as the name for the observable, and represents the observed value.
Maliciousness*
Select a maliciousness value for this observable.
Select Save.
Add observables to a graph in the Browse view
To add an observable to the last opened graph:
Find an observable to load. Go to Search > GO TO SEARCH AND BROWSE > Observables.
Locate the observable in the list, and select More on the far right of that entry.
Select Add to graph.
This adds the observable to the last graph you worked on.
To add multiple observables to the last opened graph
Find observables to load. Go to Search > GO TO SEARCH AND BROWSE > Observables.
Select more than one observable from the list.
In the horizontal bar that appears, select Add to > Graph.
This adds the observable to the last graph you worked on.