How to Pin an Observable

This topic provides step-by-step instructions for pinning an observable in an case or alert in TheHive.

Pinning an observable allows you to access it from the Observables tab within a case or alert. Pins are personal and only visible to you.

Procedure

1. Locate the case or alert where you want to pin the observable.

2. In the description, select the Observables tab.

   

3. Select next to the observable you want to pin.

4. Select Pin.

Next steps

• Add an Observable
• Remove an Observable
• Update the Status of an Observable
• Edit Multiple Observables
• Export Data from Observables
• Run Analyzers on an Observable
• Run Responders on an Observable
• Import Observables from Analyzer Reports