diff --git a/docs/includes/similar-cases-alerts-filters.md b/docs/includes/similar-cases-alerts-filters.md new file mode 100644 index 0000000000..10cb52b7a7 --- /dev/null +++ b/docs/includes/similar-cases-alerts-filters.md @@ -0,0 +1,2 @@ +!!! tip "Filters" + [Select the filters](/thehive/user-guides/organization/configure-organization/manage-ui-configuration/select-similar-cases-alerts-filters/) you want to apply on the **Similar cases** and **Similar alerts** tabs to find what you need faster. \ No newline at end of file diff --git a/docs/includes/ui-configuration-tab-go-to.md b/docs/includes/ui-configuration-tab-go-to.md new file mode 100644 index 0000000000..a8b8870809 --- /dev/null +++ b/docs/includes/ui-configuration-tab-go-to.md @@ -0,0 +1,3 @@ +Select the **UI Configuration** tab. + + ![UI configuration](/thehive/images/user-guides/organization/configure-organization/manage-ui-configuration/organization-view-ui-configuration.png) \ No newline at end of file diff --git a/docs/thehive/images/user-guides/analyst-corner/dashboard/dashboard-display-period.png b/docs/thehive/images/user-guides/analyst-corner/dashboard/dashboard-display-period.png new file mode 100644 index 0000000000..6950761a66 Binary files /dev/null and b/docs/thehive/images/user-guides/analyst-corner/dashboard/dashboard-display-period.png differ diff --git a/docs/thehive/images/user-guides/analyst-corner/dashboard/dashboard-refresh-frequency.png b/docs/thehive/images/user-guides/analyst-corner/dashboard/dashboard-refresh-frequency.png new file mode 100644 index 0000000000..bb23f5644b Binary files /dev/null and b/docs/thehive/images/user-guides/analyst-corner/dashboard/dashboard-refresh-frequency.png differ diff --git a/docs/thehive/user-guides/analyst-corner/alerts/add-an-alert-to-an-existing-case.md b/docs/thehive/user-guides/analyst-corner/alerts/add-an-alert-to-an-existing-case.md index 6bc3185c56..5ac196c5cf 100644 --- a/docs/thehive/user-guides/analyst-corner/alerts/add-an-alert-to-an-existing-case.md +++ b/docs/thehive/user-guides/analyst-corner/alerts/add-an-alert-to-an-existing-case.md @@ -27,6 +27,9 @@ If it requires a separate investigation, [create a case from the alert](create-a 3. In the **Merge alerts into case** drawer, search for the case by title or case number. + !!! note "Closed cases" + If you’re unable to find closed cases, it means your organization has [deactivated merging alerts into closed cases](../../organization/configure-organization/manage-ui-configuration/prevent-merging-alerts-into-closed-cases.md). + 4. Select **Merge**.

Next steps

diff --git a/docs/thehive/user-guides/analyst-corner/alerts/search-for-alerts/find-an-alert.md b/docs/thehive/user-guides/analyst-corner/alerts/search-for-alerts/find-an-alert.md index 54ba9cb023..efe6b91ae8 100644 --- a/docs/thehive/user-guides/analyst-corner/alerts/search-for-alerts/find-an-alert.md +++ b/docs/thehive/user-guides/analyst-corner/alerts/search-for-alerts/find-an-alert.md @@ -11,6 +11,8 @@ If you’re unsure which method to use, refer to the [Overview of Search Methods *Use this method if you want to find one or more alerts similar to a known alert and need to perform actions on them simultaneously.* +{!includes/similar-cases-alerts-filters.md!} + 1. Open a case, an alert, or a task, and select the **Similar alerts** tab. ![Similar alerts](../../../../images/user-guides/analyst-corner/cases/similar-alerts.png) diff --git a/docs/thehive/user-guides/analyst-corner/cases/create-a-new-case.md b/docs/thehive/user-guides/analyst-corner/cases/create-a-new-case.md index c1b0dafe41..f96d608b7e 100644 --- a/docs/thehive/user-guides/analyst-corner/cases/create-a-new-case.md +++ b/docs/thehive/user-guides/analyst-corner/cases/create-a-new-case.md @@ -3,17 +3,12 @@ This topic provides step-by-step instructions for creating a [case](../cases/about-cases.md) in TheHive. Several options are offered to create a case in TheHive: - + * [Create an empty case](#create-an-empty-case) - * [Create a case from a template](#create-a-case-from-a-template) - * [Create a case from an archived case](#create-a-case-from-an-archived-case) - * [Create a case from a MISP event](#create-a-case-from-a-misp-event) - * [Create a case from an alert](#create-a-case-from-an-alert) - * [Create a case from a detection tool](#create-a-case-from-a-detection-tool) {!includes/access-create-a-case.md!} @@ -24,6 +19,9 @@ Several options are offered to create a case in TheHive: 2. In the **Create case** drawer, select **Empty case**. + !!! tip "Can't find the empty case option?" + If you don’t see the empty case option, your organization has likely [hidden it](../../organization/configure-organization/manage-ui-configuration/prevent-creating-empty-cases.md) to ensure cases are created only from templates, archived cases, or MISP for better standardization. + 3. Enter the following fields: **- Title \*** @@ -114,7 +112,7 @@ Several options are offered to create a case in TheHive: 4. Select **Confirm**. -## Create a case from a MISP event +## Create a case from a [MISP event](../../../administration/misp-integration/about-misp-integration.md) !!! info "Data transfer" When creating a case from a MISP event, data from the event, such as observables, is automatically transferred to the case. diff --git a/docs/thehive/user-guides/analyst-corner/cases/find-similar-alerts-cases.md b/docs/thehive/user-guides/analyst-corner/cases/find-similar-alerts-cases.md index d777a32b78..af3f5ef99c 100644 --- a/docs/thehive/user-guides/analyst-corner/cases/find-similar-alerts-cases.md +++ b/docs/thehive/user-guides/analyst-corner/cases/find-similar-alerts-cases.md @@ -6,13 +6,15 @@ Similarity checks between cases and alerts are based on [observables](../cases/o Use this procedure to identify similar cases or to correlate alerts with other alerts or with ongoing cases. +{!includes/similar-cases-alerts-filters.md!} + ## Find similar alerts 1. [Find the alert](../alerts/search-for-alerts/find-an-alert.md) or [case](../cases/search-for-cases/find-a-case.md) you want to compare for similarity. 2. Select the **Similar alerts** tab. - ![Similar alerts](/thehive/images/user-guides/analyst-corner/cases/similar-alerts.png) + ![Similar alerts](../../../images/user-guides/analyst-corner/cases/similar-alerts.png) 3. Select **See all** in the **Matches** column to view the list of common observables. @@ -24,7 +26,7 @@ Use this procedure to identify similar cases or to correlate alerts with other a 2. Select the **Similar cases** tab. - ![Similar cases](/thehive/images/user-guides/analyst-corner/cases/similar-cases.png) + ![Similar cases](../../../images/user-guides/analyst-corner/cases/similar-cases.png) 3. Select **See all** in the **Matches** column to view the list of common observables. diff --git a/docs/thehive/user-guides/analyst-corner/cases/search-for-cases/find-a-case.md b/docs/thehive/user-guides/analyst-corner/cases/search-for-cases/find-a-case.md index 7d3a64bc3b..82c9d0a62a 100644 --- a/docs/thehive/user-guides/analyst-corner/cases/search-for-cases/find-a-case.md +++ b/docs/thehive/user-guides/analyst-corner/cases/search-for-cases/find-a-case.md @@ -27,6 +27,8 @@ If you’re unsure which method to use, refer to the [Overview of Search Methods *Use this method if you want to find one or more cases similar to a known case without needing to perform actions on them simultaneously.* +{!includes/similar-cases-alerts-filters.md!} + 1. Open a case, an alert, or a task, and select the **Similar cases** tab. ![Similar cases](../../../../images/user-guides/analyst-corner/cases/similar-cases.png) diff --git a/docs/thehive/user-guides/analyst-corner/dashboard/about-dashboards.md b/docs/thehive/user-guides/analyst-corner/dashboard/about-dashboards.md index 5134ff9b51..3e74d7f28e 100644 --- a/docs/thehive/user-guides/analyst-corner/dashboard/about-dashboards.md +++ b/docs/thehive/user-guides/analyst-corner/dashboard/about-dashboards.md @@ -61,5 +61,7 @@ Every user has read access to the dashboards within their organization and can e * [Add or Remove Widgets in a Dashboard](add-remove-widgets-dashboard.md) * [Change the Visibility of a Dashboard](change-visibility-of-a-dashboard.md) * [Export or Import a Dashboard](export-import-a-dashboard.md) +* [Adjust Dashboard Refresh Frequency](adjust-dashboard-refresh-frequency.md) +* [Set a Dashboard Display Period](set-dashboard-display-period.md) * [Download a Dashboard](download-a-dashboard.md) * [Delete a Dashboard](delete-a-dashboard.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/analyst-corner/dashboard/add-remove-widgets-dashboard.md b/docs/thehive/user-guides/analyst-corner/dashboard/add-remove-widgets-dashboard.md index 3f3691c9df..37522edfd9 100644 --- a/docs/thehive/user-guides/analyst-corner/dashboard/add-remove-widgets-dashboard.md +++ b/docs/thehive/user-guides/analyst-corner/dashboard/add-remove-widgets-dashboard.md @@ -42,5 +42,7 @@ This topic provides step-by-step instructions for adding or removing [widgets](w * [Create a Dashboard](create-a-dashboard.md) * [Change the Visibility of a Dashboard](change-visibility-of-a-dashboard.md) * [Export or Import a Dashboard](export-import-a-dashboard.md) +* [Adjust Dashboard Refresh Frequency](adjust-dashboard-refresh-frequency.md) +* [Set a Dashboard Display Period](set-dashboard-display-period.md) * [Download a Dashboard](download-a-dashboard.md) * [Delete a Dashboard](delete-a-dashboard.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/analyst-corner/dashboard/adjust-dashboard-refresh-frequency.md b/docs/thehive/user-guides/analyst-corner/dashboard/adjust-dashboard-refresh-frequency.md new file mode 100644 index 0000000000..78ddbbd4ea --- /dev/null +++ b/docs/thehive/user-guides/analyst-corner/dashboard/adjust-dashboard-refresh-frequency.md @@ -0,0 +1,28 @@ +# How to Adjust Dashboard Refresh Frequency + +This topic provides step-by-step instructions for adjusting [dashboard](about-dashboards.md) refresh frequency in TheHive. + +If you need to pause dashboard refresh and prevent users from re-enabling it due to performance issues, see [Pause Dashboard Refresh](../../organization/configure-organization/manage-ui-configuration/pause-dashboard-refresh.md). + +

Procedure

+ +1. {!includes/dashboards-view-go-to.md!} + +2. On the dashboards list, select the name of your dashboard. + + {!includes/filters-sorts-views.md!} + +3. Select the desired frequency from the **Refresh** dropdown list. + + ![Update dashboard refresh frequency](../../../images/user-guides/analyst-corner/dashboard/dashboard-refresh-frequency.png) + +

Next steps

+ +* [Widgets in Dashboards](widgets-dashboards.md) +* [Create a Dashboard](create-a-dashboard.md) +* [Add or Remove Widgets in a Dashboard](add-remove-widgets-dashboard.md) +* [Change the Visibility of a Dashboard](change-visibility-of-a-dashboard.md) +* [Export or Import a Dashboard](export-import-a-dashboard.md) +* [Set a Dashboard Display Period](set-dashboard-display-period.md) +* [Download a Dashboard](download-a-dashboard.md) +* [Delete a Dashboard](delete-a-dashboard.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/analyst-corner/dashboard/change-visibility-of-a-dashboard.md b/docs/thehive/user-guides/analyst-corner/dashboard/change-visibility-of-a-dashboard.md index e5b4166568..f0ac1c6a2d 100644 --- a/docs/thehive/user-guides/analyst-corner/dashboard/change-visibility-of-a-dashboard.md +++ b/docs/thehive/user-guides/analyst-corner/dashboard/change-visibility-of-a-dashboard.md @@ -25,5 +25,7 @@ This topic provides step-by-step instructions for changing the visibility of a [ * [Create a Dashboard](create-a-dashboard.md) * [Add or Remove Widgets in a Dashboard](add-remove-widgets-dashboard.md) * [Export or Import a Dashboard](export-import-a-dashboard.md) +* [Adjust Dashboard Refresh Frequency](adjust-dashboard-refresh-frequency.md) +* [Set a Dashboard Display Period](set-dashboard-display-period.md) * [Download a Dashboard](download-a-dashboard.md) * [Delete a Dashboard](delete-a-dashboard.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/analyst-corner/dashboard/create-a-dashboard.md b/docs/thehive/user-guides/analyst-corner/dashboard/create-a-dashboard.md index 92e858219f..faa0810f70 100644 --- a/docs/thehive/user-guides/analyst-corner/dashboard/create-a-dashboard.md +++ b/docs/thehive/user-guides/analyst-corner/dashboard/create-a-dashboard.md @@ -46,5 +46,7 @@ If you want to use a dashboard from another organization or TheHive instance as * [Add or Remove Widgets in a Dashboard](add-remove-widgets-dashboard.md) * [Change the Visibility of a Dashboard](change-visibility-of-a-dashboard.md) * [Export or Import a Dashboard](export-import-a-dashboard.md) +* [Adjust Dashboard Refresh Frequency](adjust-dashboard-refresh-frequency.md) +* [Set a Dashboard Display Period](set-dashboard-display-period.md) * [Download a Dashboard](download-a-dashboard.md) * [Delete a Dashboard](delete-a-dashboard.md) diff --git a/docs/thehive/user-guides/analyst-corner/dashboard/delete-a-dashboard.md b/docs/thehive/user-guides/analyst-corner/dashboard/delete-a-dashboard.md index d05d39a204..1f8719f021 100644 --- a/docs/thehive/user-guides/analyst-corner/dashboard/delete-a-dashboard.md +++ b/docs/thehive/user-guides/analyst-corner/dashboard/delete-a-dashboard.md @@ -24,4 +24,6 @@ This topic provides step-by-step instructions for deleting a [dashboard](about-d * [Add or Remove Widgets in a Dashboard](add-remove-widgets-dashboard.md) * [Change the Visibility of a Dashboard](change-visibility-of-a-dashboard.md) * [Export or Import a Dashboard](export-import-a-dashboard.md) +* [Adjust Dashboard Refresh Frequency](adjust-dashboard-refresh-frequency.md) +* [Set a Dashboard Display Period](set-dashboard-display-period.md) * [Download a Dashboard](download-a-dashboard.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/analyst-corner/dashboard/download-a-dashboard.md b/docs/thehive/user-guides/analyst-corner/dashboard/download-a-dashboard.md index 4e4ad5dbb1..155087601a 100644 --- a/docs/thehive/user-guides/analyst-corner/dashboard/download-a-dashboard.md +++ b/docs/thehive/user-guides/analyst-corner/dashboard/download-a-dashboard.md @@ -28,4 +28,6 @@ To download your dashboard in JSON format, refer to the [Export a Dashboard](exp * [Create a Dashboard](create-a-dashboard.md) * [Add or Remove Widgets in a Dashboard](add-remove-widgets-dashboard.md) * [Change the Visibility of a Dashboard](change-visibility-of-a-dashboard.md) +* [Adjust Dashboard Refresh Frequency](adjust-dashboard-refresh-frequency.md) +* [Set a Dashboard Display Period](set-dashboard-display-period.md) * [Delete a Dashboard](delete-a-dashboard.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/analyst-corner/dashboard/export-import-a-dashboard.md b/docs/thehive/user-guides/analyst-corner/dashboard/export-import-a-dashboard.md index c7fd275f60..df6b16c127 100644 --- a/docs/thehive/user-guides/analyst-corner/dashboard/export-import-a-dashboard.md +++ b/docs/thehive/user-guides/analyst-corner/dashboard/export-import-a-dashboard.md @@ -42,5 +42,7 @@ Use this procedure to use a dashboard from another organization or TheHive insta * [Create a Dashboard](create-a-dashboard.md) * [Add or Remove Widgets in a Dashboard](add-remove-widgets-dashboard.md) * [Change the Visibility of a Dashboard](change-visibility-of-a-dashboard.md) +* [Adjust Dashboard Refresh Frequency](adjust-dashboard-refresh-frequency.md) +* [Set a Dashboard Display Period](set-dashboard-display-period.md) * [Download a Dashboard](download-a-dashboard.md) * [Delete a Dashboard](delete-a-dashboard.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/analyst-corner/dashboard/set-dashboard-display-period.md b/docs/thehive/user-guides/analyst-corner/dashboard/set-dashboard-display-period.md new file mode 100644 index 0000000000..3cb81a9213 --- /dev/null +++ b/docs/thehive/user-guides/analyst-corner/dashboard/set-dashboard-display-period.md @@ -0,0 +1,28 @@ +# How to Set a Dashboard Display Period + +This topic provides step-by-step instructions for setting a display period for a [dashboard](about-dashboards.md) in TheHive. + +If you need to remove the **All periods** option due to performance issues, see [Remove the All Periods Option](../../organization/configure-organization/manage-ui-configuration/remove-all-periods-option.md). + +

Procedure

+ +1. {!includes/dashboards-view-go-to.md!} + +2. On the dashboards list, select the name of your dashboard. + + {!includes/filters-sorts-views.md!} + +3. Select the desired display period from the **Period** dropdown list. + + ![Update dashboard display period](../../../images/user-guides/analyst-corner/dashboard/dashboard-display-period.png) + +

Next steps

+ +* [Widgets in Dashboards](widgets-dashboards.md) +* [Create a Dashboard](create-a-dashboard.md) +* [Add or Remove Widgets in a Dashboard](add-remove-widgets-dashboard.md) +* [Change the Visibility of a Dashboard](change-visibility-of-a-dashboard.md) +* [Export or Import a Dashboard](export-import-a-dashboard.md) +* [Adjust Dashboard Refresh Frequency](adjust-dashboard-refresh-frequency.md) +* [Download a Dashboard](download-a-dashboard.md) +* [Delete a Dashboard](delete-a-dashboard.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/key-performance-indicators/hide-key-performance-indicators.md b/docs/thehive/user-guides/key-performance-indicators/hide-key-performance-indicators.md deleted file mode 100644 index f19c3c7e71..0000000000 --- a/docs/thehive/user-guides/key-performance-indicators/hide-key-performance-indicators.md +++ /dev/null @@ -1,35 +0,0 @@ -# How to Hide Key Performance Indicators - - - -This topic provides step-by-step instructions for hiding one or several key performance indicators (KPIs) for [cases](../analyst-corner/cases/about-cases.md) and [alerts](../analyst-corner/alerts/about-alerts.md) in TheHive. - -By default, all indicators are displayed in case and alert descriptions. - -You can hide some or all indicators if they're not useful or could be misleading for your organization. - -If you want to know more about the KPIs available in TheHive, refer to the [Key Performance Indicators](key-performance-indicators.md) topic. - -!!! warning "Required permissions" - Only users with an admin-type profile that has the `manageConfig` permission can hide KPIs in case and alert descriptions in TheHive. - -

Procedure

- -1. Go to the **Organization** view from the sidebar menu. - - ![Organization view](../../images/user-guides/organization/configure-organization/organization-view.png) - -2. Select the **UI Configuration** tab. - - ![UI configuration](../../images/user-guides/organization/configure-organization/manage-ui-configuration/organization-view-ui-configuration.png) - -3. Move through the **Time metrics** section. - -4. Turn on the toggles for the indicators you want to hide in case and alert descriptions. - -5. Select **Confirm**. - -

Next steps

- -* [Measure Case Management Performance](measure-case-management-performance.md) -* [Measure Alert Management Performance](measure-alert-management-performance.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/key-performance-indicators/key-performance-indicators.md b/docs/thehive/user-guides/key-performance-indicators/key-performance-indicators.md index ad6dea152b..f2d46f7362 100644 --- a/docs/thehive/user-guides/key-performance-indicators/key-performance-indicators.md +++ b/docs/thehive/user-guides/key-performance-indicators/key-performance-indicators.md @@ -4,7 +4,9 @@ TheHive provides valuable insights into event and incident time metrics, enabling you to track key performance indicators (KPIs) for [cases](../analyst-corner/cases/about-cases.md) and [alerts](../analyst-corner/alerts/about-alerts.md). -These KPIs are displayed by default on all cases and alerts in TheHive. You can also integrate them into dashboards and case reports. +These KPIs are displayed by default on all cases and alerts in TheHive. However, you can [hide some or all indicators](../organization/configure-organization/manage-ui-configuration/hide-key-performance-indicators.md) if they're not useful or may be misleading for your organization. + +You can also include these KPIs in dashboards and case reports. This topic defines each of these indicators. @@ -62,6 +64,6 @@ For more information on these KPIs, consult this [SecurityScorecard blog post](h

Next steps

* [Date Field Definitions for Alerts and Cases](../date-field-definitions-alerts-cases.md) -* [Hide Key Performance Indicators](hide-key-performance-indicators.md) +* [Hide Key Performance Indicators](../organization/configure-organization/manage-ui-configuration/hide-key-performance-indicators.md) * [Measure Case Performance](measure-case-management-performance.md) * [Measure Alert Performance](measure-alert-management-performance.md) diff --git a/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/.pages b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/.pages deleted file mode 100644 index e69de29bb2..0000000000 diff --git a/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/about-ui-configuration.md b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/about-ui-configuration.md deleted file mode 100644 index fb1928ee43..0000000000 --- a/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/about-ui-configuration.md +++ /dev/null @@ -1,18 +0,0 @@ -# About UI Configuration - -In this section you can find information about UI Configuration . - -To configure the UI: - -1. Select the option **Hide Empty Case Button** to disallow creating empty cases. -1. Select the option **Merge alerts into closed cases** to disallow merging alerts into closed cases. -1. Select the option **Disallow refresh option in dashboards** to disallow the refresh option in dashboards -1. Select the **default filter of alert case similarity panel** from the list. -1. Define the **default date format** used to display dates. - - e.g. YYYY-MM-DD HH:mm -1. Click the **Save** button. - -UI Configuration - - -> NOTE: Default date format can be configured at the organization level, by defining the preferred format in the UI Configuration view. This requires a user with org-admin profile or any profile with manageConfig permission. \ No newline at end of file diff --git a/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/hide-key-performance-indicators.md b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/hide-key-performance-indicators.md new file mode 100644 index 0000000000..b59b44f83c --- /dev/null +++ b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/hide-key-performance-indicators.md @@ -0,0 +1,36 @@ +# How to Hide Key Performance Indicators + + + +This topic provides step-by-step instructions for hiding one or several key performance indicators (KPIs) for [cases](../../../analyst-corner/cases/about-cases.md) and [alerts](../../../analyst-corner/alerts/about-alerts.md) in TheHive. + +By default, all indicators appear in case and alert descriptions. + +You can hide some or all indicators if they're not useful or could be misleading for your organization. + +If you want to know more about the KPIs available in TheHive, refer to the [Key Performance Indicators](../../../key-performance-indicators/key-performance-indicators.md) topic. + +!!! warning "Required permissions" + Only users with the `manageConfig` permission can hide KPIs in cases and alerts in TheHive. + +

Procedure

+ +1. {!includes/organization-view-go-to.md!} + +2. {!includes/ui-configuration-tab-go-to.md!} + +3. Move through the **Time metrics** section. + +4. Turn on the toggles for the indicators you want to hide in case and alert descriptions. + +5. Select **Confirm**. + +

Next steps

+ +* [Measure Case Management Performance](../../../key-performance-indicators/measure-case-management-performance.md) +* [Measure Alert Management Performance](../../../key-performance-indicators/measure-alert-management-performance.md) +* [Pause Dashboard Refresh](pause-dashboard-refresh.md) +* [Remove the All Periods Option in a Dashboard](remove-all-periods-option.md) +* [Prevent Users from Creating Empty Cases](prevent-creating-empty-cases.md) +* [Prevent Users from Merging Alerts into Closed Cases](prevent-merging-alerts-into-closed-cases.md) +* [Select Similar Cases and Alerts Filters](select-similar-cases-alerts-filters.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/pause-dashboard-refresh.md b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/pause-dashboard-refresh.md new file mode 100644 index 0000000000..e9ad109969 --- /dev/null +++ b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/pause-dashboard-refresh.md @@ -0,0 +1,28 @@ +# How to Pause Dashboard Refresh + +This topic provides step-by-step instructions for pausing [dashboard](../../../analyst-corner/dashboard/about-dashboards.md) refresh in TheHive. + +Use this procedure to improve application performance by preventing dashboard refresh and stopping users from re-enabling it. + +To reduce the refresh frequency while keeping it enabled, see [Adjust Dashboard Refresh Frequency](../../../analyst-corner/dashboard/adjust-dashboard-refresh-frequency.md). + +!!! warning "Required permissions" + Only users with the `manageConfig` permission can pause dashboard refresh in TheHive. + +

Procedure

+ +1. {!includes/organization-view-go-to.md!} + +2. {!includes/ui-configuration-tab-go-to.md!} + +3. In the **Dashboard** section, turn on the **Disallow refresh option in dashboards** toggle. + +4. Select **Confirm**. + +

Next steps

+ +* [Remove the All Periods Option in a Dashboard](remove-all-periods-option.md) +* [Prevent Users from Creating Empty Cases](prevent-creating-empty-cases.md) +* [Prevent Users from Merging Alerts into Closed Cases](prevent-merging-alerts-into-closed-cases.md) +* [Select Similar Cases and Alerts Filters](select-similar-cases-alerts-filters.md) +* [Hide Key Performance Indicators](hide-key-performance-indicators.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/prevent-creating-empty-cases.md b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/prevent-creating-empty-cases.md new file mode 100644 index 0000000000..c5f0071f94 --- /dev/null +++ b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/prevent-creating-empty-cases.md @@ -0,0 +1,26 @@ +# How to Prevent Users from Creating Empty Cases + +This topic provides step-by-step instructions for hiding the empty case option when [creating a case](../../../analyst-corner/cases/create-a-new-case.md#) in TheHive. + +By default, the empty case option is available. Use this procedure to require users to create cases only from templates, archived cases, or MISP to ensure better standardization. + +!!! warning "Required permissions" + Only users with the `manageConfig` permission can hide the empty case option in TheHive. + +

Procedure

+ +1. {!includes/organization-view-go-to.md!} + +2. {!includes/ui-configuration-tab-go-to.md!} + +3. In the **Alert and case** section, turn on the **Hide empty case button** toggle. + +4. Select **Confirm**. + +

Next steps

+ +* [Pause Dashboard Refresh](pause-dashboard-refresh.md) +* [Remove the All Periods Option in a Dashboard](remove-all-periods-option.md) +* [Select Similar Cases and Alerts Filters](select-similar-cases-alerts-filters.md) +* [Prevent Users from Merging Alerts into Closed Cases](prevent-merging-alerts-into-closed-cases.md) +* [Hide Key Performance Indicators](hide-key-performance-indicators.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/prevent-merging-alerts-into-closed-cases.md b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/prevent-merging-alerts-into-closed-cases.md new file mode 100644 index 0000000000..ffb9948847 --- /dev/null +++ b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/prevent-merging-alerts-into-closed-cases.md @@ -0,0 +1,28 @@ +# How to Prevent Users from Merging Alerts into Closed Cases + +This topic provides step-by-step instructions for deactivating the ability to [merge alerts into closed cases](../../../analyst-corner/alerts/add-an-alert-to-an-existing-case.md) in TheHive. + +A closed case is one with a [status](../../../../administration/status/about-statuses.md) assigned to the *Closed* stage. + +By default, it's possible to merge alerts into a closed case. Use this procedure to restrict merging alerts into cases statuses linked to the *New* or *In progress* stages. + +!!! warning "Required permissions" + Only users with the `manageConfig` permission can deactivate merging alerts into closed cases in TheHive. + +

Procedure

+ +1. {!includes/organization-view-go-to.md!} + +2. {!includes/ui-configuration-tab-go-to.md!} + +3. In the **Alert and case** section, turn on the **Merge alerts into closed cases** toggle. + +4. Select **Confirm**. + +

Next steps

+ +* [Pause Dashboard Refresh](pause-dashboard-refresh.md) +* [Remove the All Periods Option in a Dashboard](remove-all-periods-option.md) +* [Prevent Users from Creating Empty Cases](prevent-creating-empty-cases.md) +* [Select Similar Cases and Alerts Filters](select-similar-cases-alerts-filters.md) +* [Hide Key Performance Indicators](hide-key-performance-indicators.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/remove-all-periods-option.md b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/remove-all-periods-option.md new file mode 100644 index 0000000000..d7c8b1d2c4 --- /dev/null +++ b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/remove-all-periods-option.md @@ -0,0 +1,28 @@ +# How to Remove the All Periods Option in a Dashboard + +This topic provides step-by-step instructions for removing the **All periods** option in a [dashboard](../../../analyst-corner/dashboard/about-dashboards.md) in TheHive. + +Use this procedure to improve application performance by preventing users to select the **All periods** option. + +To learn how to change the display period for dashboards, see [Set a Dashboard Display Period](../../../analyst-corner/dashboard/set-dashboard-display-period.md). + +!!! warning "Required permissions" + Only users with the `manageConfig` permission can remove the **All periods** option in TheHive. + +

Procedure

+ +1. {!includes/organization-view-go-to.md!} + +2. {!includes/ui-configuration-tab-go-to.md!} + +3. In the **Dashboard** section, turn on the **Disallow "All" period option in dashboards** toggle. + +4. Select **Confirm**. + +

Next steps

+ +* [Pause Dashboard Refresh](pause-dashboard-refresh.md) +* [Prevent Users from Creating Empty Cases](prevent-creating-empty-cases.md) +* [Prevent Users from Merging Alerts into Closed Cases](prevent-merging-alerts-into-closed-cases.md) +* [Select Similar Cases and Alerts Filters](select-similar-cases-alerts-filters.md) +* [Hide Key Performance Indicators](hide-key-performance-indicators.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/select-similar-cases-alerts-filters.md b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/select-similar-cases-alerts-filters.md new file mode 100644 index 0000000000..1dc2432989 --- /dev/null +++ b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/select-similar-cases-alerts-filters.md @@ -0,0 +1,26 @@ +# How to Select Similar Cases and Alerts Filters + +This topic provides step-by-step instructions for selecting filters to apply on the [**Similar cases** and **Similar alerts** tabs](../../../analyst-corner/cases/observables/about-observables.md#similar-alerts-and-cases) in TheHive. + +The **Similar cases** and **Similar alerts** tabs display cases and alerts that share similar observables based on defined criteria. + +!!! warning "Required permissions" + Only users with the `manageConfig` permission can select filters on the **Similar cases** and **Similar alerts** tabs in TheHive. + +

Procedure

+ +1. {!includes/organization-view-go-to.md!} + +2. {!includes/ui-configuration-tab-go-to.md!} + +3. In the **Alert and case** section, select the filter you want to apply in the **Select the default filter of alert case similarity panel** dropdown list. + +4. Select **Confirm**. + +

Next steps

+ +* [Pause Dashboard Refresh](pause-dashboard-refresh.md) +* [Remove the All Periods Option in a Dashboard](remove-all-periods-option.md) +* [Prevent Users from Creating Empty Cases](prevent-creating-empty-cases.md) +* [Prevent Users from Merging Alerts into Closed Cases](prevent-merging-alerts-into-closed-cases.md) +* [Hide Key Performance Indicators](hide-key-performance-indicators.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/ui-configuration-settings.md b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/ui-configuration-settings.md new file mode 100644 index 0000000000..31261d67fb --- /dev/null +++ b/docs/thehive/user-guides/organization/configure-organization/manage-ui-configuration/ui-configuration-settings.md @@ -0,0 +1,26 @@ +# UI Configuration Settings + +This topic provides a list of all UI configuration settings available at the organization level in TheHive. + +## Configuration settings + +| Setting | Purpose | +|--------------|-----------------------------------------------| +| Hide empty case button | Hides the default option to create empty cases, enforcing new cases to start only from [templates](../../../analyst-corner/cases/create-a-new-case.md#create-a-case-from-a-template), [archived cases](../../../analyst-corner/cases/create-a-new-case.md#create-a-case-from-an-archived-case), or [MISP](../../../analyst-corner/cases/create-a-new-case.md#create-a-case-from-a-misp-event). See [Prevent Users from Creating Empty Cases](prevent-creating-empty-cases.md) for detailed instructions. | +| Merge alerts into closed cases | Prevent users from merging alerts into closed cases. See [Prevent Users from Merging Alerts into Closed Cases](prevent-merging-alerts-into-closed-cases.md) for detailed instructions. | +| Select the default filter of alert case similarity panel | Allows choosing how lists are displayed in the **Similar alerts** and **Similar cases** tabs. See [Select Similar Cases and Alerts Filters](select-similar-cases-alerts-filters.md) for detailed instructions. | +| Disallow refresh option in dashboards | Prevents dashboard refresh and removes the ability to change this setting. This option reduces performance issues for organizations. See [Pause Dashboard Refresh](pause-dashboard-refresh.md) for detailed instructions. | +| Disallow "All" period option in dashboards | Prevents selecting **All periods** when displaying a dashboard. This option reduces performance issues for organizations. See [Remove the All Periods Option in a Dashboard](remove-all-periods-option.md) for detailed instructions. | +| Hide time to detect | Hides the [time to detect](../../../key-performance-indicators/key-performance-indicators.md#time-to-detect-ttd) indicator on cases and alerts when it's not useful or could be misleading for your organization. See [Hide Key Performance Indicators](hide-key-performance-indicators.md) for detailed instructions. | +| Hide time to triage | Hides the [time to triage](../../../key-performance-indicators/key-performance-indicators.md#time-to-triage-ttt) indicator on cases and alerts when it's not useful or could be misleading for your organization. See [Hide Key Performance Indicators](hide-key-performance-indicators.md) for detailed instructions. | +| Hide time to acknowledge | Hides the [time to acknowledge](../../../key-performance-indicators/key-performance-indicators.md#time-to-acknowledge-tta) indicator on cases and alerts when it's not useful or could be misleading for your organization. See [Hide Key Performance Indicators](hide-key-performance-indicators.md) for detailed instructions. | +| Hide time to qualify | Hides the [time to qualify](../../../key-performance-indicators/key-performance-indicators.md#time-to-qualify-ttq) indicator on cases when it's not useful or could be misleading for your organization. See [Hide Key Performance Indicators](hide-key-performance-indicators.md) for detailed instructions. | +| Hide time to resolve | Hides the [time to resolve](../../../key-performance-indicators/key-performance-indicators.md#time-to-resolve-ttr) indicator on cases when it's not useful or could be misleading for your organization. See [Hide Key Performance Indicators](hide-key-performance-indicators.md) for detailed instructions. | + +

Next steps

+ +* [Manage User Accounts](../manage-user-accounts/manage-user-accounts.md) +* [Rename a Custom Tag](../manage-custom-tags/rename-a-custom-tag.md) +* [Create a Case Page Template](../manage-templates/case-page-templates/create-a-case-page-template.md) +* [Create a Case Report Template](../manage-templates/case-report-templates/create-a-case-report-template.md) +* [Create a Case Template](../manage-templates/case-templates/create-a-case-template.md) \ No newline at end of file diff --git a/docs/thehive/user-guides/organization/configure-organization/manage-user-accounts/manage-user-accounts.md b/docs/thehive/user-guides/organization/configure-organization/manage-user-accounts/manage-user-accounts.md index 101f890cb3..fa8dffe173 100644 --- a/docs/thehive/user-guides/organization/configure-organization/manage-user-accounts/manage-user-accounts.md +++ b/docs/thehive/user-guides/organization/configure-organization/manage-user-accounts/manage-user-accounts.md @@ -9,12 +9,12 @@ This topic provides step-by-step instructions for managing [user accounts](about 1. Go to the **Users** view from the sidebar menu. - ![Users view](/thehive/images/administration-guides/users-view.png) + ![Users view](../../../../images/administration-guides/users-view.png) 2. Locate the user account you're looking for, hover over it, and select :fontawesome-solid-eye:. !!! tip "Can't find a user account?" - You can apply [filters and sorting](/thehive/user-guides/analyst-corner/about-filtering-and-sorting/) to help locate user accounts. These preferences can be saved using [views](/thehive/user-guides/analyst-corner/about-views/). + You can apply [filters and sorting](/thehive/user-guides/analyst-corner/about-filtering-and-sorting/) to help locate user accounts. These preferences can be saved using [views](../../../analyst-corner/about-views.md). === "As an organization administrator" @@ -23,16 +23,16 @@ This topic provides step-by-step instructions for managing [user accounts](about 1. Go to the **Organization** view from the sidebar menu. - ![Organization view](/thehive/images/user-guides/organization/configure-organization/organization-view.png) + ![Organization view](../../../../images/user-guides/organization/configure-organization/organization-view.png) 2. Select the **Users** tab. - ![Organization users tab](/thehive/images/user-guides/organization/configure-organization/manage-users/organization-users-tab.png) + ![Organization users tab](../../../../images/user-guides/organization/configure-organization/manage-users/organization-users-tab.png) 3. Locate the user account you're looking for, hover over it, and select :fontawesome-solid-eye:. !!! tip "Can't find a user account?" - You can apply [filters and sorting](/thehive/user-guides/analyst-corner/about-filtering-and-sorting/) to help locate user accounts. These preferences can be saved using [views](/thehive/user-guides/analyst-corner/about-views/). + You can apply [filters and sorting](../../../analyst-corner/about-filtering-and-sorting.md) to help locate user accounts. These preferences can be saved using [views](/thehive/user-guides/analyst-corner/about-views/). ## Manage a user account email diff --git a/docs/thehive/user-guides/organization/ui-configuration.md b/docs/thehive/user-guides/organization/ui-configuration.md deleted file mode 100644 index f7099e485c..0000000000 --- a/docs/thehive/user-guides/organization/ui-configuration.md +++ /dev/null @@ -1,57 +0,0 @@ -# UI configuration - -At the organization level, few UI behaviours can be configured. - -Access to the list by opening the *Organization* menu, and the *UI Configuration* tab. - -
- ![UI configuration panel](../../images/user-guides/organization/configure-organization/manage-ui-configuration/organization-ui-configuration.png){ width="550" } -
UI configuration panel
-
- -### Configuration parameters - -**Hide Empty Case button** - : *disabled* by default. When enabled, users from the current organization cannot create **empty** *Cases* and will have to chose between create a *Case* using a template or from an archive - -
- ![Disable Empty Case](../../images/user-guides/organization/configure-organization/manage-ui-configuration/organization-ui-configuration-2.png){ width="450" } -
Disable Empty Case
-
- -**Merge Alerts into closed cases** - : *disabled* by default. When enabled, users from the current organization are allowed to choose a closed Case to merge Alerts in - - -**Disallow refresh option in dashboards** - : *disabled* by default. When enabled, users from the current organization cannot refresh dashboards. This could be useful if performance issues are encountered with the UI with a certain number of users - -
- ![Don't refresh dashboards](../../images/user-guides/organization/configure-organization/manage-ui-configuration/organization-ui-configuration-3.png){ width="450" } -
Don't refresh dashboards
-
- - -**Disallow "All" period option in dashboards** - : *disabled* by default. When enabled, users from the current organization cannot use the *All* period in dashboards. This could be useful if performance issues are encountered with the UI - -
- ![Don't select period on dashboards](../../images/user-guides/organization/configure-organization/manage-ui-configuration/organization-ui-configuration-4.png){ width="450" } -
Don't select period on dashboards
-
- -**Select the default filter of alert case similarity panel** - : Default filter for Similar Case tab, in the view of an Alert - -
- ![Select default filters for Case similarity](../../images/user-guides/organization/configure-organization/manage-ui-configuration/organization-ui-configuration-5.png){ width="450" } -
Select default filters for Case similarity
-
- -
- ![Result in Similar Cases tab in Alerts](../../images/user-guides/organization/configure-organization/manage-ui-configuration/organization-ui-configuration-6.png){ width="450" } -
Result in Similar Cases tab in Alerts
-
- -**Define the default date format used to display dates** - : Select which format you want the dates to be displayed within the current organization \ No newline at end of file diff --git a/mkdocs.yml b/mkdocs.yml index e7bc766834..af0f523f49 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -99,7 +99,7 @@ plugins: 'thehive/user-guides/organisation/configure-organization/manage-notifications/manage_notification.md': 'thehive/user-guides/organization/configure-organization/manage-notifications/about-notifications.md' 'thehive/user-guides/organisation/configure-organization/manage-notifications/supported-notifiers.md': 'thehive/user-guides/organization/configure-organization/manage-notifications/about-notifications.md' 'thehive/user-guides/organisation/configure-organization/manage-notifications/triggering-events.md': 'thehive/user-guides/organization/configure-organization/manage-notifications/write-filtered-event-trigger.md' - 'thehive/user-guides/organisation/configure-organization/manage-ui-configuration/about-ui-configuration.md': 'thehive/user-guides/organization/configure-organization/manage-ui-configuration/about-ui-configuration.md' + 'thehive/user-guides/organisation/configure-organization/manage-ui-configuration/about-ui-configuration.md': 'thehive/user-guides/organization/configure-organization/manage-ui-configuration/ui-configuration-settings.md' 'thehive/user-guides/organisation/configure-organization/manage-users/add-delete-user.md': 'thehive/user-guides/organization/configure-organization/manage-user-accounts/create-a-user-account.md' 'thehive/user-guides/organisation/configure-organization/manage-users/lock.md': 'thehive/user-guides/organization/configure-organization/manage-user-accounts/lock-a-user-account.md' 'thehive/user-guides/organisation/configure-organization/manage-users/manage-views.md': 'thehive/user-guides/analyst-corner/about-views.md' @@ -126,7 +126,7 @@ plugins: 'thehive/user-guides/organisation/templates/case-templates.md': 'thehive/user-guides/organization/configure-organization/manage-templates/case-templates/about-case-templates.md' 'thehive/user-guides/organisation/templates/page-templates.md': 'thehive/user-guides/organization/configure-organization/manage-templates/case-page-templates/about-case-page-templates.md' 'thehive/user-guides/organisation/templates/report-templates.md': 'thehive/user-guides/organization/configure-organization/manage-templates/case-report-templates/about-case-report-templates.md' - 'thehive/user-guides/organisation/ui-configuration.md': 'thehive/user-guides/organization/ui-configuration.md' + 'thehive/user-guides/organisation/ui-configuration.md': 'thehive/user-guides/organization/configure-organization/manage-ui-configuration/ui-configuration-settings.md' 'thehive/user-guides/analyst-corner/alerts/actions.md': 'thehive/user-guides/analyst-corner/alerts/start-investigating-an-alert.md' 'thehive/user-guides/analyst-corner/alerts/general.md': 'thehive/user-guides/analyst-corner/alerts/about-alerts.md' 'thehive/user-guides/analyst-corner/alerts/manage-views.md': 'thehive/user-guides/analyst-corner/about-views.md' @@ -309,6 +309,9 @@ plugins: 'thehive/user-guides/analyst-corner/getting-started.md': 'thehive/overview/index.md' 'thehive/user-guides/analyst-corner/introduction.md': 'thehive/overview/index.md' 'thehive/user-guides/analyst-corner/sign-in-as-an-admin.md': 'thehive/overview/index.md' + 'thehive/user-guides/key-performance-indicators/hide-key-performance-indicators.md': 'thehive/user-guides/organization/configure-organization/manage-ui-configuration/hide-key-performance-indicators.md' + 'thehive/user-guides/organization/configure-organization/manage-ui-configuration/about-ui-configuration.md': 'thehive/user-guides/organization/configure-organization/manage-ui-configuration/ui-configuration-settings.md' + 'thehive/user-guides/organization/ui-configuration.md': 'thehive/user-guides/organization/configure-organization/manage-ui-configuration/ui-configuration-settings.md' extra: generator: false @@ -505,7 +508,6 @@ nav: - 'View a Page': thehive/user-guides/knowledge-base/view-a-knowledge-base-page.md - 'Key Performance Indicators': - 'KPIs': thehive/user-guides/key-performance-indicators/key-performance-indicators.md - - 'Hide KPIs': thehive/user-guides/key-performance-indicators/hide-key-performance-indicators.md - 'Measure Case Management Performance': thehive/user-guides/key-performance-indicators/measure-case-management-performance.md - 'Measure Alert Management Performance': thehive/user-guides/key-performance-indicators/measure-alert-management-performance.md - 'Organization Administration': @@ -540,7 +542,14 @@ nav: - 'Rename a Custom Tag': thehive/user-guides/organization/configure-organization/manage-custom-tags/rename-a-custom-tag.md - 'Delete a Custom Tag': thehive/user-guides/organization/configure-organization/manage-custom-tags/delete-a-custom-tag.md - 'View Custom Tag Statistics': thehive/user-guides/organization/configure-organization/manage-custom-tags/view-custom-tag-statistics.md - - 'UI Configuration': thehive/user-guides/organization/ui-configuration.md + - 'UI Configuration': + - 'UI Configuration Settings': thehive/user-guides/organization/configure-organization/manage-ui-configuration/ui-configuration-settings.md + - 'Prevent Users from Creating Empty Cases': thehive/user-guides/organization/configure-organization/manage-ui-configuration/prevent-creating-empty-cases.md + - 'Prevent Users from Merging Alerts into Closed Cases': thehive/user-guides/organization/configure-organization/manage-ui-configuration/prevent-merging-alerts-into-closed-cases.md + - 'Select Similar Cases and Alerts Filters': thehive/user-guides/organization/configure-organization/manage-ui-configuration/select-similar-cases-alerts-filters.md + - 'Pause Dashboard Refresh': thehive/user-guides/organization/configure-organization/manage-ui-configuration/pause-dashboard-refresh.md + - 'Remove the All Periods Option in a Dashboard': thehive/user-guides/organization/configure-organization/manage-ui-configuration/remove-all-periods-option.md + - 'Hide KPIs': thehive/user-guides/organization/configure-organization/manage-ui-configuration/hide-key-performance-indicators.md - 'Notifications & Endpoints': - 'About Notifications': thehive/user-guides/organization/configure-organization/manage-notifications/about-notifications.md - 'Create a Notification': thehive/user-guides/organization/configure-organization/manage-notifications/create-a-notification.md @@ -747,6 +756,8 @@ nav: - 'Add or Remove Widgets': thehive/user-guides/analyst-corner/dashboard/add-remove-widgets-dashboard.md - 'Delete a Dashboard': thehive/user-guides/analyst-corner/dashboard/delete-a-dashboard.md - 'Change Visibility of a Dashboard': thehive/user-guides/analyst-corner/dashboard/change-visibility-of-a-dashboard.md + - 'Adjust Dashboard Refresh Frequency': thehive/user-guides/analyst-corner/dashboard/adjust-dashboard-refresh-frequency.md + - 'Set a Dashboard Display Period': thehive/user-guides/analyst-corner/dashboard/set-dashboard-display-period.md - 'Export or Import a Dashboard': thehive/user-guides/analyst-corner/dashboard/export-import-a-dashboard.md - 'Download a Dashboard': thehive/user-guides/analyst-corner/dashboard/download-a-dashboard.md - 'Detail View vs. Preview': thehive/user-guides/analyst-corner/preview-vs-detail-view.md