Edit Multiple Observables

manageObservable

Perform bulk edits on multiple observables in TheHive to update their properties efficiently without editing each one individually.

Procedure

1. Locate the case or alert where you want to update the observables.

2. In the alert or case, select the Observables tab.

   

3. Select next to the observables you want to update.

4. Select above the list.

5. In the Edit several observables drawer, update the values as needed.

6. Select Submit.

Next steps

• Add an Observable
• Delete an Observable
• Update the Status of an Observable
• Pin an Observable
• Export Data from Observables
• Run Analyzers and Review Reports for an Observable
• Run Responders and Review Reports for an Observable
• Import Observables from Analyzer Reports