Import Indicators of compromiseΒΆ

To import IOCs, either enable one of the pre-integrated IOCs feeds on the Settings->Feeds Tab, or import the IOCs files manually.

In this example we will import the indicators files manually:

  1. Click on Rules from the left menu.

  2. Click on Add/Import Indicators Drop-down menu.

  3. Then Click on Bulk Import Indicators from File.

  4. Choose the files that has the indicators, and set the other options as needed then click on import.

../_images/new_cluster_import_indicators_from_file.png
  1. once the import is done, you will be able to view the indicators via the Indicators Management Page by Clicking on Indicators of the left menu.