Views:
By default, user-defined suspicious objects never expire. Existing and newly added user-defined suspicious objects can be configured to automatically expire.

Procedure

  1. Go to Threat Intelligence → Custom Intelligence → User-Defined Suspicious Objects.
  2. Click the gear icon above the detections columns.
    The Expiration Settings dialog appears.
  3. Select Set existing and newly added user-defined suspicious objects to expire in:, and then select a days value from the drop-down list.
  4. Click Save.
    The expiration settings immediately apply to existing objects, and are applied to newly added objects as they are added.
    Note
    Note
    • Objects that have not been updated in the specified number of days will be deleted immediately. Deleted objects cannot be restored.
    • Disabling expiration settings sets all existing objects to never expire.