Environment
Enterprise EDR Console: All Versions
Objective
Integrate unique threat intelligence by adding custom queries to watchlist reports
Resolution
- Navigate to the Investigate page
- Execute the desired query in the search bar
- Verify the results are what is expected
- Select Add search to Threat Report under the search magnifying glass
- Select an existing custom Watchlist or create a new custom Watchlist
- Add the search query to an existing Threat Report or create a new Threat Report
- Select Save
Related Content