Use Manual Review as Rule Action
Configure Manual Review as an action in rule to mark an IOC for review by the analyst.
To use Manual Review as the rule action, do the following:
In the action box, select Manual Review as the rule action.
Select CTIX as the application to implement the rule.
Select an account to identify the instance to run the rule.