Skip to main content

Cyware Threat Intelligence eXchange

Deprecate IOCs using Rule

Configure Deprecate as an action for a rule when the IOC is no longer valid.

To use Deprecate as a rule action, do the following:

  1. In the action box, select Deprecate as the action.

  2. Select CTIX as the application to implement the rule.

  3. Select an account to identify the instance to run the rule.

  4. Enter the number of days after which the IOC gets deprecated. You can enter a maximum limit of 180 days to deprecate an IOC.