How to populate your Watch Lists

Use Entity Match to find the right entities before adding them to a Watch List. Entity Match lets you search by name, type, or keyword and returns canonical Recorded Future entity IDs. This is the best way to ensure you are adding the correct, disambiguated entities to your lists rather than guessing at IDs.

For example, to find the right entity for a company you want to monitor, search Entity Match with the company name and filter by the Company entity type. The results include entity names, IDs, and descriptions so you can confirm you have the right match before adding it to a Watch List.

Watch List entity limits

Most Watch Lists default to a maximum of 1,000 entities. You can request an increase up to 15,000 entities for most Watch Lists by submitting a support request at support.recordedfuture.com. The Meta Company Impersonation Watch List is limited to 1 entity by default.

Supported entity types

There are 18 Watch Lists. The table below shows which entity types each Watch List supports.

Watch List	Supported Entity Types
Attacker	Threat Actors/Threat Actor Categories, Organizations
Brand Image	Hash
Brand Names	Companies, Organizations, Products
Domain	Companies, Domains (incl. subdomains)
Executive	Person
Industry Peers	Companies, Organizations
Industry	Industries
IP	IP Addresses, CIDRs, ASNs
Locations	Cities, ProvinceOrState, Region, Countries, Continents
Meta Company Impersonation	Companies, Organizations (limited to 1 entity by default)
Method	Malware/Malware Categories, Attack Vectors, MITRE ATT&CK Identifiers
Operation	Operations (cyber operations, hacktivist operations, systematic campaigns)
Private Facilities	Facility, Private Facility
Routing Number	MICR Routing Number
Suppliers	Companies, Organizations
Target	Companies, Organizations, Industries, Exploit Target, Technologies, Products
Tech Stack	Companies, Organizations, Products, Product Identifiers, Technologies, Exploit Target Categories
Third-Parties	Companies, Organizations
Vulnerability	Vulnerabilities