Ignore Alert Updates from MISP

manageAlert/update

Ignore alert updates from the Malware Information Sharing Platform (MISP) in TheHive to prevent automatic changes to specific alerts.

MISP is an open-source threat intelligence platform that integrates with TheHive to retrieve events from MISP servers and convert them into alerts. By default, TheHive automatically updates these alerts when the corresponding MISP events change, which may also update the alerts’ statuses.

Requirements

Automatic alert updates are available only for alerts created through MISP server integrations.

Procedure

1. Find the alert you want to exclude from automatic updates.

2. In the alert, select Ignore new updates.

   

Next steps

• Change an Alert Status
• Start Working on an Alert
• Assign an Alert