A Watchlist is any keyword that you can add surveillance for, or closely monitor, within the intel received in CTIX. It can be an IP address, a hash, a domain, a URL, a technical term, a non-technical term, or any word or any number.
Adding a keyword to the watchlist enables you to track the number of times the keyword is observed in the platform from various sources. The platform stores each occurrence of the keyword and allows you to see the sources from which it is reported. Each time a watchlist keyword is observed in the platform, the platform notifies you using the system notifications. You can also choose to receive email alerts for the significant keywords per your requirements.