Supported Functionalities for Rules
Click the ellipsis of the rule to do the following:
Edit: Edits the rule elements, such as source and collection, condition, and actions.
Run: Select a start and end date to manually trigger a rule. When you run a rule on historical data, CTIX allows you to run up to the last 15 days.
View Threat Data: Opens the list of threat data elements on which the rule is triggered to date.
Delete: Deletes the defined rule from the database.
You can also perform the following bulk actions on the rules:
Make Active: Changes the status of all rules to active.
Make Inactive: Changes the status of all rules to inactive.
You can refresh the rules listing screen by clicking Refresh on the top right corner of the screen.