Skip to main content

Add to Watchlist

Create a watchlist in Intel Exchange and add the keywords you want to monitor.

  1. From Main Menu, navigate to My Org and select Watchlist.

  2. Click Add to Watchlist.

  3. Enter the keyword you want to track in Intel Exchange. It can be any string, such as an IP address, domain name, URL, or technical term.

  4. (Optional) Add one or more tags to the keyword. You can also create a new tag if it does not already exist. For more information, see Tags on Watchlist Keywords.

    Notice

    This field is available in Watchlist in Intel Exchange v3.7.5.3 onwards.

  5. Select Enable Email Alert to receive email notifications when the term is found in Intel Exchange.

  6. Select an email address present in Intel Exchange, or you can also enter any email address.

  7. Click Add.

Tags on Watchlist Keywords

Understand how tags behave when you apply them to watchlist keywords:

  • Apply tags automatically to matched threat data whenever a watchlist keyword is triggered.

  • Inherit all tags from multiple keywords if a threat data object matches more than one watchlist keyword.

  • Support tags from any category, including User, Source, System, Group, and Privileged Access.