Edit Multiple Observables

manageObservable

This topic provides step-by-step instructions for performing bulk edits on multiple observables in TheHive.

Procedure

1. Locate the case or alert where you want to update the observables.

2. In the alert or case, select the Observables tab.

   

3. Select next to the observables you want to update.

4. Select above the list.

5. In the Edit several observables drawer, update the values as needed.

6. Select Submit.

Next steps

• Add an Observable
• Remove an Observable
• Update the Status of an Observable
• Pin an Observable
• Export Data from Observables
• Run Analyzers and Review Reports for an Observable
• Run Responders and Review Reports for an Observable
• Import Observables from Analyzer Reports