Skip to main content

Cyware Threat Intelligence eXchange

Use Update Tag as Rule Action

Configure Update Tag as a rule action to categorize an attack or define the type of object.

To use Update Tag as a rule action, do the following:

  1. In the action box, select Update Tag as the rule action.

  2. Select CTIX as the application to implement the rule.

  3. Select an account to identify the instance to run the rule.

  4. Set Operations from one of the following:

    • Remove: Removes a tag from the IOC.

    • Add: Adds a tag to the IOC.

  5. Select the tags to remove or add based on previous selections.