Watchlists detect and notify you of the presence of an IOC (Incident of Compromise) in your environment.

You access a watchlist's options from the Take Action > Edit page.

  • The Alert on hit checkbox allows you to receive an alert when an IOC is detected in your environment.
  • The Include historical data option allows you to get more insight on an alert by evaluating its historical data.