Be able to implement whitelist / clearlist / internal lists / monitoring lists and act on it

[SamuelHassine]

Use case

Be able to implement whitelist / clearlist / internal lists / monitoring lists and act on it

For instance:

• List of the domain names of the company
• List of the public IP ranges of the company
• List of legitimate things
• List of brands
• etc.

Then act on it, a few example:

• Prevent creation of an indicator based on an observable part of a list (avoiding putting "filigran.io" in detection)
• Configure triggers to be alerted when context is added to an observable belonging to this list (ie. email with @filigran.io mentioned on the dark web or in a report).

[aHenryJard]

Please note that 'whitelist' word should be avoided when possible to use more functionnal terms like 'acceptlist' or 'allowedlist'.