Add IOCs to Allowed Indicators
You can add IOCs received in Threat Mailbox as an allowed indicator in CTIX. Indicators that have been defined as non-malicious or not dangerous are allowed indicators.
To add IOCs to allowed indicators, do the following:
From Main Menu, open Threat Mailbox under Collection.
Select a feed and click Allow Indicators.
Select the required IOCs from the available list.
CTIX displays the list of IOCs available in the selected feed.
Click Save.