Breadcrumbs

Related Events

Last Updated: October 23, 2026

PREREQUISITES

Frame 1 (1)-20250919-220908.png
Viewing Related Events

  1. In the sidebar, select Artifacts. The list shows All Artifacts by default; the artifact-type list next to the site list narrows it to one artifact type.

    The Artifacts page, opened from the sidebar, with the artifact-type list (All Artifacts) and the site list above the artifact table

  2. In the site list, select the site that matches the one configured when generating the EFM API key.

  3. Click on an artifact record. In the Artifact Detail panel, select the Events tab. The number in the tab name is the artifact's event count.

    re-02-events-tab.png

  4. Review the related events. Each is a card headed by its unique event ID (Event #<ID>), with its risk level, description, event type, tactic and technique.

The Total Event Count column of the Artifacts list, and the Event Count field in Artifact Detail, indicate the number of related events linked to each artifact record. The following sections introduce required matching factors for grouping related events and non-impacting factors.

Required Matching Factors

REMINDER

Artifacts instantiate only when all instantiation criteria are met.

Non-Impacting Factors

  • Integration

  • Event source

  • Name of the payload target key

  • Position of the matching target field in the JSON payload

  • Position of the EFM record in the mapping table

  • Artifact role

  • Relationship configuration

RELATED ARTICLES