How to Export Data from Observables

This topic provides step-by-step instructions for exporting data from observables in a case or alert in TheHive.

Copy data from an observable

1. Locate the observable you want to download.

2. In the observable, select .

3. Select Copy data.

Download an observable attachment

1. Locate the observable you want to download.

2. In the observable, select .

3. Select Download.

4. Memorize the password and select OK.

Export a list of observables

1. Locate the case or alert from which you want to export the observables.

2. In the alert or case, select the Observables tab.

   

3. Select Export list to export all observables displayed in the tab, reflecting the applied filters and sorting. To export a specific selection of observables, select next to the observables you want to export, then select Export selection.

   

4. In the Export observable to file drawer, select your preferred formatting options.

   Select Yes for Protect to fang URLs and prevent accidental clicks.

5. Select Export to file.

Next steps

• Add an Observable
• Remove an Observable
• Update the Status of an Observable
• Edit Multiple Observables
• Pin an Observable
• Run Analyzers and Review Reports for an Observable
• Run Responders and Review Reports for an Observable
• Import Observables from Analyzer Reports