Skip to content

Remove Tactics, Techniques and Procedures#

Remove tactics, techniques and procedures (TTPs) from a case in TheHive.

TTPs describe the behaviors and methods commonly used by specific threat actors or groups.

Required permissions

Only users with the manageProcedure permission can add and remove TTPs in cases and alerts in TheHive.

Procedure

Bulk remove

To remove TTPs in bulk, select to each TTP you want to remove, then at the top of the screen.

  1. Find the case where you want to remove TTPs.

  2. In the alert or case, select the TTPs tab.

    TTPs tab

  3. Select next to the TTP you want to remove.

    Applying filters and views

    Apply filters and sorting and save preferences using views.

  4. Select Delete.

  5. Select OK.

Next steps