How to Export Tactics, Techniques and Procedures

This topic provides step-by-step instructions for exporting tactics, techniques and procedures (TTPs) from a case or an alert in TheHive.

TTPs describe the behaviors and methods commonly used by specific threat actors or groups.

Procedure

1. Find the case or the alert where you want to export TTPs.

2. In the description, select the TTPs tab.

   

3. Select Export list to export all TTPs, or select next to the TTPs you want to export, then select Export selection.

   Applying filters and views

   You can apply filters and sorting. These preferences can be saved using views.

Next steps

• Add TTPs
• Remove TTPs