Edit entities through the Discovery page

1. From the left sidebar, select Discovery.

2. To apply one of the available quick filters to the current view, select + Add filter.

   • Entity type: filter entities by type.

   • Attachment: filter on entities with attachments.

   • External references: filter on entities with external references.

   • Source: filter entities by source.

   • Author: filter entities by their authors.

   • MITRE ATT&CK: filter entities by MITRE ATT&CK classifications.

   • TLP: filter entities by Traffic Light Protocol (TLP).

   • Date: filter entities by date of creation.

   • Reliability: filter entities by reliability. This filter is based on the reliability of the entities source.

   • Dataset: filter entities by dataset.
     Only visible if any of the currently filtered entities are in a dataset.

   To change an applied filter, either:

   • toggle the switch on its button.

   • Select its button and change your selection in the drop-down menu.

   To delete one of the applied filters, select X on the left of its button.

3. From the Discovery page, you can edit entities through:

   • the entity detail pane.

   • bulk actions (only TLP and confidence).

Edit from the detail pane

1. In the entity table, select the entity that you want to edit.

2. In the entity detail pane, you can edit the entity in one of the following ways:

   1. At the top of the detail pane, click the menu, and select Edit.

   2. When you have finished editing the entity, select Publish.
      EclecticIQ Intelligence Center creates a new version of the entity with the edits you applied.

   OR:

   1. Apply inline edits to any field by clicking .

   2. When you have finished editing the entity fields you want to modify, select Save.

Edit in bulk

1. In the list of Entities, apply the necessary filters by selecting + Add Filter, selecting the filter you’d like to add from the drop-down menu and setting it up.

2. Check the boxes in the rows of all theEntities you want to edit.

3. Then:

   • If you want to edit Entities’ MITRE classifications, Tags, TLP, or Confidence:

     1. From the top bar select MITRE ATT&CK, Tag, TLP, or Confidence.

     2. In the modal that comes up, select a new value from the drop-down menu and/or deselect values already selected.

     3. Select Save.

   • If you want to enrich Entities:

     1. From the top bar select Enrich.

     2. In the modal that comes up, select the checkboxes of all enrichers you’d like to use.

     3. Select Enrich.

   • If you want to add Entities to a Graph, Task, Dataset, ATT&CK Analysis, AI report, or note:

     1. From the top bar select + Add to.

     2. From the drop-down menu, select what you would like to add the selected Entities to.

   • If you want to export Entities:

     1. From the top bar select Export.

     2. From the drop-down menu, select the format you would like to export the selected Entities in.

   • If you want to delete Entities:

     1. From the top bar select Delete.

     2. In the modal that comes up, confirm by selecting Delete.