From c8ed535be32889b53b48ef03dd77d999425bbabd Mon Sep 17 00:00:00 2001 From: Alexander J Date: Tue, 20 Jun 2017 12:39:42 +0200 Subject: [PATCH] Update README.md --- managing-feeds/README.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/managing-feeds/README.md b/managing-feeds/README.md index 370190d..a4fbe4b 100644 --- a/managing-feeds/README.md +++ b/managing-feeds/README.md @@ -29,6 +29,7 @@ Here you will have access to a dynamic form. Let's check each field by order. ![Add feed form](./figures/addfeedform.png) * Enabled: Is the feed active or not +* Lookup Visible: If this is not checked, the correlation will only show up to you, if checked, correlations are visible for other users as well * Name: Just a name to identify the feed * Provider: Name of the content provider * Input Source: Where does the input come from @@ -78,3 +79,8 @@ To add a tag (resp. organisation), first type it into the top middle (resp. bott To remove a tag (resp. organisation), select it in the list and click on the arrow pointing to the inside. ![Remove Filter rules](./figures/removefilterrules.png) ![Remove Filter rules](./figures/removefilterrules2.png) + +## Feed correlation + +If an indicator from an feed matches an indicator within a MISP event, it will show up as "Feed hits" in the event overview. +The correlation will not show up in the correlation graph of the event.