---
title: Add associated tasks to an IoC
description: In addition to importing associated tasks \(such as changes and incidents\) as STIX data, you can add them to an IoC manually.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/t\_AddAssociatedTasksToIoC.html
release: australia
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Indicators of compromise, IoC Repository, Threat Intelligence, Enterprise security case management applications, Security Operations]
---

# Add associated tasks to an IoC

In addition to importing associated tasks \(such as changes and incidents\) as STIX data, you can add them to an IoC manually.

## Before you begin

Role required: sn\_ti.write

## Procedure

1.  Navigate to **All** > **Threat Intelligence** > **IoC Repository** > **Indicators**.

2.  Click the IoC to which you want to add an associated task.

3.  Click the **Associated Tasks** related list.

4.  Click **Edit**.

5.  As needed, use the filters to locate the tasks you want to associate with the IoC.

6.  Using the slushbucket, add the task to the **Associated Tasks** list.

7.  Click **Save**.


**Parent Topic:**[Indicators of compromise](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/c_IoCs.md)

**Related topics**  


[View an IoC]()

[Add a related observable to an IoC]()

[Add a related attack mode/method to an IoC]()

[Identify associated indicator types]()

[Identify indicator sources]()