By default, user-defined suspicious objects never expire. Existing and newly added user-defined suspicious objects can be configured to automatically expire.
- Go to Threat Intelligence > Custom Intelligence > User-Defined Suspicious Objects.
-
Click the gear icon above the detections columns.
The Expiration Settings dialog appears.
- Select Set existing and newly added user-defined suspicious objects to expire in:, and then select a days value from the drop-down list.
-
Click Save.
The expiration settings immediately apply to existing objects, and are applied to newly added objects as they are added.
Note:-
Objects that have not been updated in the specified number of days will be deleted immediately. Deleted objects cannot be restored.
-
Disabling expiration settings sets all existing objects to never expire.
-
Parent topic: User-Defined Suspicious Objects