Skip to content

How to Change Case Classification Settings#

This topic provides step-by-step instructions for changing a case's classification settings—specifically its severity, traffic light protocol (TLP), and permissible actions protocol (PAP)—in TheHive.

Required permissions

Only users with the manageCase/update permission can change case classification settings in TheHive.

Procedure

  1. Find the case you want to update.

  2. In the case, move through the left pane.

    Case classification settings

  3. Select the severity button to update its value. It indicates the severity level of the case.

  4. Select the TLP button to update its value. It indicates how you can share the case's information with others. Refer to the MISP taxonomy for detailed definitions of TLP values.

  5. Select the PAP button to update its value. It specifies which actions you can take with the case data. Refer to the MISP taxonomy for detailed definitions of PAP values.

Next steps