Edit entities in a dataset

1. In the left navigation bar, go to Search > Go to Search and Browse > Datasets.

2. To show and to hide the available quick filters in the current view click .

   • Entity type: filter entities by type.

   • Attachment: filter on entities with attachments.

   • External references: filter on entities with external references.

   • Source: filter entities by source.

   • Author: filter entities by their authors.

   • MITRE ATT&CK: filter entities by MITRE ATT&CK classifications.

   • TLP: filter entities by Traffic Light Protocol (TLP).

   • Date: filter entities by date of creation.

   • Reliability: filter entities by reliability. This filter is based on the reliability of the entities source.

   • Dataset: filter entities by dataset.
     Only visible if any of the currently filtered entities are in a dataset.

3. Select the dataset that contains the entities you want to edit.

4. From the dataset detail pane, select Open dataset .

5. To show and to hide the available quick filters in the current view click .

   • Entity type: filter entities by type.

   • Attachment: filter on entities with attachments.

   • External references: filter on entities with external references.

   • Source: filter entities by source.

   • Author: filter entities by their authors.

   • MITRE ATT&CK: filter entities by MITRE ATT&CK classifications.

   • TLP: filter entities by Traffic Light Protocol (TLP).

   • Date: filter entities by date of creation.

   • Reliability: filter entities by reliability. This filter is based on the reliability of the entities source.

   • Dataset: filter entities by dataset.
     Only visible if any of the currently filtered entities are in a dataset.

6. From the Dataset page, you can edit entities through:

   • the edit context menu.

   • the entity detail pane.

   • bulk actions (only TLP and confidence).

Edit from the context menu

1. In the list of filtered entities, locate the entity that you want to edit, and click .

2. From the drop-down menu select Edit.

3. Edit the entity to apply your changes as needed.

4. When you have finished editing the entity, select Publish.

EclecticIQ Intelligence Center creates a new version of the entity with the edits you applied.

Edit from the detail pane

1. In the entity table, select the entity that you want to edit.

2. In the entity detail pane, you can edit the entity in one of the following ways:

   1. At the top of the detail pane, click the menu, and select Edit.

   2. When you have finished editing the entity, select Publish.
      EclecticIQ Intelligence Center creates a new version of the entity with the edits you applied.

   OR:

   1. Apply inline edits to any field by clicking .

   2. When you have finished editing the entity fields you want to modify, select Save.

Edit in bulk

1. In the list of entities, apply the necessary filters and select all entities you want to edit by checking the boxes in their rows.

2. Then:

   1. If you want to edit entities’ MITRE classifications, Tags, TLP, or Confidence:

      1. From the top bar select MITRE ATT&CK, Tag, TLP, or Confidence.

      2. In the modal that comes up, select a new value from the dropdown menu and/or deselect values already selected.

      3. Select Save.

   2. If you want to enrich entities:

      1. From the top bar select Enrich.

      2. In the modal that comes up, select the checkboxes of all enrichers you’d like to use.

      3. Select Enrich.

   3. If you want to delete entities:

      1. From the top bar select Delete.

      2. In the modal that comes up, confirm by selecting Delete.