Associating an Observable with Other Observables

In addition to bidirectional associations between observables and threat model entities, ThreatStream enables you to associate observables with other related observables. Associations appear in the Associations table on observable details pages, allowing you to quickly and easily pivot between related observables.

To associate an observable with another observable:

1. Navigate to the details page of the observable for which you want to add the association.
2. Under Associations, click Observables.
3. Click Add.
4. Enter a search query and select the observables you want to add as associations.
5. Click Add Observables.

To remove observable associations:

1. Navigate to the details page of the observable for which you want to remove the association.
2. Under Associations, click Observables.
3. Select the observable you want to disassociate.
4. Click Remove.