Environment
- Enterprise EDR Console: All Versions
Objective
Build a custom watchlist by combining individual threat reports from multiple sources
Resolution
- Click Enforce, then Watchlists
- Click Add watchlists, then select Build
- Select reports you want to add to a watchlist, then click Add. Use search and filters to find reports by attribute (e.g., IOC, source).
- Select an existing watchlist or create a new watchlist, then click Add.
Related Content
