Only write-access users can select and modify tags. Tags are used to add metadata for IoC for SecOps teams in order to create workflows for filtering, viewing, staging, or pushing particular IoCs to plugins. When an IoC is tagged (regardless of type), any subsequent table entries of the same IoC will be similarly tagged; it is a global setting.
Tags are displayed in the IoC Source of the IoC shown by clicking on the down arrow.
You can add or edit the tags from this view, or select multiple IoCs from the summary list, and then click on the tags button to select and apply tags.
In the tag selection modal, you can:
- Search tags using the Search tags field to quickly find matching tags.
- Select or deselect tags for one or more selected IoCs.
- View selected tags separately under the Selected Tags section.
- Create a new tag directly from the modal by entering tag name and selecting color.
The same searchable tag selection experience is available when editing tags from the IoC source expander and while selecting tags in Business Rules where tag-based selection is used.
