About Attachments#
Attachments are files linked to an organization, case, or alert. They store supporting materials—such as images, documents, or reports—that provide context or evidence.
This topic explains how attachments work in TheHive.
Where to add attachments#
Organizations#
Attachments can be manually added to organizations.
Cases#
Attachments can be added to cases. Case reports, images in case descriptions, summaries, and task logs, are automatically saved as attachments. Files can also be added manually to the case or reports tabs.
Removing an image from a description, summary, or task log doesn't automatically remove it from the list of attachments.
Alerts#
Attachments can be added to alerts. Images in case descriptions and summaries are automatically saved as attachments. Files can also be added manually.
Removing an image from a description or summary doesn't automatically remove it from the list of attachments.
Format#
Any file format is supported for attachments.
Permissions#
Required permissions
- Only users with the
manageKnowledgeBase
permission can manage attachments at the organization level in TheHive. - Only users with the
manageCase/update
andmanageAlert/update
permissions can add and remove attachments at the case and alert levels in TheHive.
Adding an attachment grants all users permission to view or download it.
Next steps
- Add an Attachment to an Organization
- Remove an Attachment from an Organization
- Share an Attachment from an Organization
- Download an Attachment from an Organization
- Add an Attachment to a Case or an Alert
- Remove an Attachment from a Case or an Alert
- Share an Attachment from a Case or an Alert
- Download an Attachment from a Case or an Alert