Skip to content

How to Export Data from Observables#

This topic provides step-by-step instructions for exporting data from observables in an case or alert in TheHive.

Copy data from an observable#

  1. Locate the observable you want to download.

  2. In the observable details, select .

  3. Select Copy data.

Download an observable attachment#

  1. Locate the observable you want to download.

  2. In the observable details, select .

  3. Select Download.

  4. Memorize the password and select OK.

Export a list of observables#

  1. Locate the case or alert from which you want to export the observables.

  2. In the description, select the Observables tab.

    Observables tab

  3. Select Export list to export all observables. To export a specific selection of observables, select next to the observables you want to export, then select Export selection.

  4. In the Export observable to file drawer, select your preferred formatting options.

    Select Yes for Protect to fang URLs and prevent accidental clicks.

  5. Select Export to file.

Next steps