How does Google SOAR decide whether a entity is internal or external?

Hello all, 

we are struggeling with the "IsInternalAsset" entity configuration. 
We mapped a field in the ontology configuration to "DestinationDomains", which in my opinion should be an external Entity.
However, if you open a “DestinationDomains” entity in a case, it will appear as “IsInternalAsset” = “True”.
Can anybody help or knowns how to configure an entity as internal or external?

Thanks a lot!

Some screenshots:Picture1.pngPicture2.png

Solved Solved
1 4 682
1 ACCEPTED SOLUTION

Artifacts are always internal by design:

View solution in original post

4 REPLIES 4