Edit entities through the Discovery page#

  1. In the left navigation bar, select Discovery icon Discovery.

  2. To show and to hide the available quick filters in the current view click Filter.

    • Entity type: filter entities by type.

    • Attachment: filter on entities with attachments.

    • External references: filter on entities with external references.

    • Source: filter entities by source.

    • Author: filter entities by their authors.

    • MITRE ATT&CK: filter entities by MITRE ATT&CK classifications.

    • TLP: filter entities by Traffic Light Protocol (TLP).

    • Date: filter entities by date of creation.

    • Reliability: filter entities by reliability. This filter is based on the reliability of the entities source.

    • Dataset: filter entities by dataset.
      Only visible if any of the currently filtered entities are in a dataset.

  3. From the Discovery page, you can edit entities through:

Edit from the detail pane#

  1. In the entity table, select the entity that you want to edit.

  2. In the entity detail pane, you can edit the entity in one of the following ways:

    1. At the top of the detail pane, click the More menu, and select Edit.

    2. When you have finished editing the entity, select Publish.
      EclecticIQ Intelligence Center creates a new version of the entity with the edits you applied.

    OR:

    1. Apply inline edits to any field by clicking Pencil.

    2. When you have finished editing the entity fields you want to modify, select Save.

Edit in bulk#

  1. In the list of entities, apply the necessary filters and select all entities you want to edit by checking the boxes in their rows.

  2. Then:

    1. If you want to edit entities’ MITRE classifications, Tags, TLP, or Confidence:

      1. From the top bar select MITRE ATTACK icon MITRE ATT&CK, Tag Tag, TLP icon TLP, or Confidence icon Confidence.

      2. In the modal that comes up, select a new value from the dropdown menu and/or deselect values already selected.

      3. Select Save.

    2. If you want to enrich entities:

      1. From the top bar select Enrichment Enrich.

      2. In the modal that comes up, select the checkboxes of all enrichers you’d like to use.

      3. Select Enrich.

    3. If you want to delete entities:

      1. From the top bar select Trash Delete.

      2. In the modal that comes up, confirm by selecting Delete.