1. To add a Grouping Object, navigate to the Intelligence dropdown menu and select Grouping Object.

2. If any exist, a list of existing Grouping objects will load with the item Name, Type, Created By user, Modified On date, and Modified By user.

3. Click on Create New in the top right corner.

4. Give the Grouping a Name and enter a Description.

5. Select a Context that describes the Grouping, selecting from suspicious-activity, malware-analysis, or unspecified.

6. Click in the Related Objects field and select an object from the dropdown or begin typing to search for a specific object. Click the plus sign to the right of Create grouping to save the grouping.

7. The saved Grouping allows users to Deactivate (A), Share on TICE (B), Edit the entry (C), View Details (D), or Audit (E) the entry. Users can also enhance the Grouping by adding Notes (F), Opinions (G), Relationships (H), or External References (I).