Help Center/ SecMaster/ User Guide/ Threat Operations/ Indicator Management/ Disabling and Deleting an Indicator
Updated on 2024-11-21 GMT+08:00

Disabling and Deleting an Indicator

Scenario

This topic describes how to disable or delete an indicator.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
  4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.

    Figure 1 Workspace management page

  5. In the navigation pane on the left, choose Threat Operations > Indicators.

    Figure 2 Indicators

  6. On the Indicators page, close or delete an indicator.

    Table 1 Indicator parameters

    Operation

    Description

    Close

    1. On the Indicator page, locate the row that contains the target indicator, click Close in the Operation column. The Close dialog box is displayed.
    2. In the dialog box that is displayed, select the close reason and enter comments.
    3. Click OK.

    Delete

    1. On the Indicators page, locate the target indicator and click Delete in the Operation column.
    2. In the dialog box displayed, click OK.
      NOTE:

      Deleted indicators cannot be restored. Exercise caution when performing this operation.