Add relationships to a graph

Relationships add intelligence value by describing how entities and observables are related. This information provides additional context, and it helps understand how a specific resource is used, or the purpose it serves for a potential attacker.

For example, it can clarify that an observable describes a vulnerability or a weakness that is related to its parent exploit target entity. Options vary based on the relationship the observable has with the specific entity type it belongs to.

For more information about relationship types, see About relationships.

When you create a relationship in a graph, it is a draft relationship. You can recognize a draft entity by the dashed circle around it.

For more information about the difference between draft and published states, see Draft and published entities

To create a relationship in a graph:

1. Right-click the first entity or observable in the relationship.

   The relationship is an outgoing relationship for this entity or observable.

2. Click Add relationship.

   A green circle appears around the entity or observable.

3. Hover your cursor over the second entity or observable in the relationship.

   A green circle appears around that entity or observable.

   The relationship is an incoming relationship for this entity or observable.

   Entities or observables that cannot be in a relationship with the first entity are grayed out.

   You can select more than one entity by either clicking on each one separately or by dragging your cursor over all of them.

4. Left-click the entity or observable to confirm the relationship.

5. Click Confirm in the dialog box at the bottom of the screen.

Once you have confirmed a relationship, you can edit it.