Managing Import Jobs

In this section:

Approving Import Jobs
Managing Approved Jobs
Managing Import Jobs Without Approve Intel Privileges
Rejecting Import Jobs
Approving and Rejecting Import Jobs in Bulk
Editing Observable Values Before Approval
Deleting Import Jobs
Re-importing Observable Values
Managing Excluded Observables

After creating an import job, the import job receives the Ready To Review status. Users with the Approve Intel permission, can modify, approve, or reject this import job. See Approving Import Jobs and Rejecting Import Jobs for more details.

Users without the Approve Intel permission cannot approve import jobs, but they can edit import jobs before they are approved. See Managing Import Jobs Without Approve Intel Privileges for details.

Approved import jobs are added to ThreatStream intelligence and assigned the Approved status. However, their attributes can be modified even after approval. See Managing Approved Jobs for details.

Rejected import jobs are excluded from threat intelligence on ThreatStream and assigned the Rejected status.

All import jobs regardless of their status can be deleted by users who have the Approve Intel permission. See Deleting Import Jobs for details.