Skip to content

About Attachments#

Attachments are files linked to an organization, case, or alert. They store supporting materials—such as images, documents, or reports—that provide context or evidence.

This topic explains how attachments work in TheHive.

Where to add attachments#

Organizations#

Attachments can be manually added to organizations.

Cases#

Attachments can be added to cases. Case reports, images in case descriptions, summaries, and task logs, are automatically saved as attachments. Files can also be added manually to the case or reports tabs.

Removing an image from a description, summary, or task log doesn't automatically remove it from the list of attachments.

Alerts#

Attachments can be added to alerts. Images in case descriptions and summaries are automatically saved as attachments. Files can also be added manually.

Removing an image from a description or summary doesn't automatically remove it from the list of attachments.

Format#

Any file format is supported for attachments.

Permissions#

Required permissions

  • Only users with the manageKnowledgeBase permission can manage attachments at the organization level in TheHive.
  • Only users with the manageCase/update and manageAlert/update permissions can add and remove attachments at the case and alert levels in TheHive.

Adding an attachment grants all users permission to view or download it.

Next steps