Managing My Watchlist

Users can monitor certain vendor and organization names in the My Watchlist page in the Vendor Watchlist and Organization Watchlist, respectively. If a match for a monitored asset appears, it triggers an alert. Vendors and organizations can be added to the watchlist manually by users or automatically by EASM.

To filter the monitored assets, see Filtering ransomware intelligence.

To create a new asset to manage:

1. Go to Adversary Centric Intelligence > Ransomware Intelligence.

2. In the Watchlist section, click Manage. The My Watchlist page is displayed.

3. Click + icon. The Create Watchlist dialog is displayed.

   

4. Select the watchlist to add to from the Select Watchlist dropdown.

5. Enter a name for the monitored asset.

6. Enter the domain name of the monitored asset.

7. Click Submit. The asset is displayed on the assigned watchlist.

To add vendors in bulk:

1. Go to Adversary Centric Intelligence > Ransomware Intelligence.

2. In the Watchlist section, click Manage. The My Watchlist page is displayed.

3. Click Upload CSV icon to upload the .csv files containing the vendors list. Browse and select the file. Click Open.

   

   Note: Ensure that the format in which the vendors data is stored matches with the required format. To view the required format click Download Sample CSV icon, select the watchlist type from the drop down and click Download.

To edit a monitored asset:

1. Go to Adversary Centric Intelligence > Ransomware Intelligence.

2. In the Watchlist section, click Manage. The My Watchlist page is displayed.

3. Find the asset you want to edit and click Edit icon. The Edit Watchlist dialog is displayed.

   

4. Edit the asset details and click Submit.

To delete a monitored asset:

1. Go to Adversary Centric Intelligence > Ransomware Intelligence.

2. In the Watchlist section, click Manage. The My Watchlist page is displayed.

3. Click Delete icon. A confirmation dialog is displayed.

   

4. Select Delete.