diff --git a/src/psyc/lines/train.py b/src/psyc/lines/train.py
index 1a534e0..0ebadd7 100644
--- a/src/psyc/lines/train.py
+++ b/src/psyc/lines/train.py
@@ -62,7 +62,7 @@ class DatasetReport(BaseModel):
 
 def _ex_ioc_extraction(case: Case) -> Optional[Example]:
     obs = case.observables
-    if not (obs.urls or obs.domains or obs.ips or obs.hashes):
+    if not (obs.urls or obs.domains or obs.ips or obs.hashes or obs.cves):
         return None
     threat = case.source_metadata.get("threat", "malware")
     tags = case.source_metadata.get("tags", "")