Skip to content

Remove Tactics, Techniques and Procedures#

manageProcedure

Remove tactics, techniques and procedures (TTPs) from a case in TheHive.

TTPs describe the behaviors and methods commonly used by specific threat actors or groups.

Procedure

Bulk remove

To remove TTPs in bulk, select to each TTP you want to remove, then at the top of the screen.

  1. Find the case where you want to remove TTPs.

  2. In the alert or case, select the TTPs tab.

    TTPs tab

  3. Select next to the TTP you want to remove.

    Applying filters and views

    Apply filters and sorting and save preferences using views.

  4. Select Delete.

  5. Select OK.

Next steps