Skip to main content
Ctrl+K
Logo image Logo image

Intelligence Center 3.4.4 Docs

Site Navigation

  • Release Notes
  • Install Configure Upgrade
  • Get to know EclecticIQ Intelligence Center
  • Work with intelligence
  • Integrations

Section Navigation

  • Command palette
  • View the help
  • AI features
    • AI-powered search
    • Writing assistant
    • AI-generated reports
  • About ingestion
  • Tags
  • Browse
    • Customize list columns
    • Edit entities in Browse
    • Filter entities in Browse
  • Discovery
    • Add entities from the discovery service
    • Customize list columns
    • Edit entities through the Discovery page
    • Export from discovery
  • Exposure
    • About exposure
    • Configure exposure
    • View exposure
    • Edit entities in Exposure
    • Review Exposure
    • Override exposure
    • Customize list columns
  • Production
    • Customize list columns
    • Edit entities in Production
    • Filter entities in Production
  • Rules
    • Entity rules
      • About entity rules
      • Create entity rules
      • Entity rule actions
      • Content criteria tool
      • Manage entity rules
    • Observable rules
      • Create observable rules
      • Manage observable rules
    • Enrichment rules
      • Create enrichment rules
      • Manage enrichment rules
    • Discovery rules
      • Create
      • Manage
    • Create
    • Manage
  • MITRE ATT&CK
    • Classifications
      • (Un)assign TTPs to entities
      • Filter with and view TTPs
    • Analysis
      • Create heat maps
      • Customize heat maps
  • Knowledge packs
  • Data mapping templates
  • Search
    • Query Syntax
    • Relational
    • Kibana
    • Tokenization
  • Filters
    • About filters
    • About source reliability
    • Filter entities by source
    • Filter entities by TLP
    • Filter entities with the histogram
    • Filter entities with timebar
    • Use the context filters
    • Use the quick filters
  • Workspaces
    • About workspaces
    • Access workspaces
    • Default public workspace
    • Create workspaces
    • List and unlist workspaces
    • Add edit and remove entities
    • Add edit and remove datasets
    • Add and remove graphs
    • Collaborate with other users
      • Add collaborators to a workspace
      • Remove collaborators from a workspace
      • Create user tasks
      • View tasks
      • Edit tasks
      • Write and review comments
    • Edit workspaces
    • Archive workspaces
    • Restore workspaces
    • Delete workspaces
    • View workspace history
  • Datasets
    • About datasets
    • Create a dataset
    • Add entities to a dataset
    • Edit entities in a dataset
    • Export from a dataset
    • Edit a dataset
    • Delete a dataset
    • Dataset metrics
  • Graphs
    • About graphs
    • Create a graph
    • Access a graph
    • Add entities to a graph
    • Analyze entities in a graph
    • Group entities in a graph
    • Edit entities in a graph
    • Publish entities in a graph
    • Remove entities from a graph
    • Add relationships to a graph
    • Edit relationships in a graph
    • Publish relationships in a graph
    • Remove relationships from a graph
    • Add observables to a graph
    • Publish observables in a graph
    • Edit observables in a graph
    • Remove observables from a graph
    • Delete observables from a graph
    • Review enrichment observables
    • Move around on the graph
    • Graph on Neighborhood tab
    • Add graph to workspaces
    • Filter entities with the timebar
    • Filter entities with the histogram
    • Toggle visualization layouts
    • Save and export the graph
    • View full titles in the graph
  • Permissions
    • Default Intelligence Center roles
    • Intelligence Center permissions
    • Permissions to access settings
    • Permissions to access data
    • Permissions for public API endpoints
    • Token-based authentication
      • Create an API token
      • Delete an API token
    • Two-factor authentication (2FA)
      • About two-factor authentication
      • Enforce two-factor authentication
      • Set up two-factor authentication
      • Use Do not ask for N days
      • Generate new recovery codes
      • Recover two-factor authentication
      • Disable two-factor authentication
      • Review two-factor authentication activity
  • Users
    • User permissions
    • Manage your own user account
    • Manage users
    • Manage groups
    • Manage roles
    • Manage notifications
    • Manage automation users
    • Export and import user database
  • Policies
    • Account policies
    • Data policies
      • Create data policies
      • Manage data policies

Observable rules#

  • Create observable rules
  • Manage observable rules

previous

Manage entity rules

next

Create observable rules