Overview #
The Edit IoC feature in Maltiverse allows users to modify the classification and tags of any Indicator of Compromise (IoC) directly from its detail view. This functionality is critical for maintaining accurate and up-to-date threat intelligence as classifications or threat contexts evolve over time.
With the Edit IoC feature, users can:
- Modify the current classification of an IoC.
- Add, edit, or remove tags associated with the IoC.
How to Use the Edit IoC Feature #
Accessing the Edit IoC Option #
- Navigate to the IoC View: When you are viewing the details of a specific IoC in Maltiverse, locate the action bar at the top-right corner of the screen.
- Click the Edit Button: In the action bar, you will see an Edit button represented by a pencil icon 🖉. Clicking this button opens the Edit IoC modal.
Editing the IoC Classification and Tags #
Once the modal opens, you will have the following options:
- Change IoC Classification: You can modify the classification of the IoC by selecting from the available classification options. This allows you to update the IoC based on the latest intelligence or threat understanding.
- Add or Remove Tags: Tags help categorize and filter IoCs for better threat management. You can add new tags, edit existing ones, or remove any tags that no longer apply.
Changes will take place immediately once save button is clicked
