Skip to content

Share an Observable with Other Internal Organizations#

manageCase/update manageShare

Manually share an observable in a shared case with linked organizations in TheHive. This is useful when observable sharing rules are set to manual, ensuring that users share only the relevant observables.

Shared cases only

To share an observable manually, the case must already be shared with the relevant linked organizations. If the case hasn’t been shared yet, refer to Share a Case.

To learn more about how sharing rules function and interact, see Organizations Sharing Rules.

Procedure

  1. Locate the shared case where you want to share the observable.

  2. Go to the Observables tab.

  3. Move through the Shares section.

  4. Select .

  5. Select the linked organization to share the observable with.

  6. Select Add share.

Next steps