Relationships

The article titled About relationships explains the concepts behind the use of relationships in EclecticIQ Intelligence Center.

To add relationships between a report and entities it may point or be associated to, do the following:

1. In the Relations section, click Relationship.

2. From the drop-down menu, select the option corresponding to the relationship you want to create.
   The following options are available:

   Select this option…	… to create this relationship for the report
   Indicators	Outgoing relationship — Relates the report to the indicator(s) in the Search an entity dialog.
   TTPs	Outgoing relationship — Relates the report to the selected TTP(s) in the Search an entity dialog. Recommends carrying out a course of action to respond to the report.
   Exploit targets	Outgoing relationship — Relates the report to the selected exploit target(s) in the Search an entity dialog.
   Incidents	Outgoing relationship — Relates the report to the selected incident(s) in the Search an entity dialog.
   Courses of action	Outgoing relationship — Relates the report to the selected course(s) of action in the Search an entity dialog.
   Campaigns	Outgoing relationship — Relates the report to the selected campaign(s) in the Search an entity dialog.
   Threat actors	Outgoing relationship — Relates the report to the selected threat actor(s) in the Search an entity dialog.
   Related reports	Outgoing relationship — Relates the campaign to the selected report(s) in the Search an entity dialog.
   Sighting Report	Incoming relationship — Relates the selected sighting(s) in the Search an entity dialog to the report.

3. Select an entity.

4. Go to the bottom-right corner of the pane, and click Select.

5. From the Relationship type, you can select the name of entity relationship you added.
   You can also type in your own relationship name in the empty input field.
   
   When you assign a relationship a predefined or a custom name, it is visible in the graph view.

   The arrow orientation, either or , indicates that the relationship is either incoming — from the related entity to the current one — or outgoing — from the current entity to the related one.

   • To remove a relationship type name, go to the relationship type you want to remove, and click  .
     The relationship type name is removed.

   • To remove a relationship, go to the row of the relationship you want to remove, and click .
     The row and the corresponding relationship are removed.

   
   

   You cannot undo these actions. They are irreversible.