Skip to content

Commit

Permalink
Update broken links in user guides
Browse files Browse the repository at this point in the history
  • Loading branch information
nadouani committed Sep 6, 2021
1 parent b9e4e82 commit 3e84d94
Show file tree
Hide file tree
Showing 10 changed files with 37 additions and 37 deletions.
4 changes: 2 additions & 2 deletions docs/thehive/user-guides/analysts/close-case.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ To close a `case`, you must have the `manageCase` permission (refer to [Profiles

You can find the Close button on the `case` banner:

![close case](../images/close-case.png)
![close case](./images/close-case.png)

Closing a `case` requires that all `tasks` contained in the `case` are closed. If you didn't closed the `tasks` before, a pop-up will suggest you to close them all.

Expand All @@ -16,6 +16,6 @@ Finally, provide the necessary details to close the case:
- If True positive: Was there an impact (yes/no)
- Summary: a summary of the incident

![close case](../images/close-case-details.png)
![close case](./images/close-case-details.png)

Once the details provided, clic on Close case.
6 changes: 3 additions & 3 deletions docs/thehive/user-guides/analysts/create-case.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,11 +6,11 @@ To create a `case`, you must have the `manageCase` permission (refer to [Profile

In TheHive banner, clic the button *New case*:

![create case button](../images/create-case-button.png)
![create case button](./images/create-case-button.png)

Then you can either chose to use a `Case template`, or start it from scratch using *Empty case* (this option may be unavailable following your `organisation` configuration):

![chose your case template](../images/create-case-chose-template.png)
![chose your case template](./images/create-case-chose-template.png)

Once you chose your template, fill the `case` details:

Expand All @@ -24,6 +24,6 @@ Once you chose your template, fill the `case` details:

Information annoted with a '*' are mandatory information.

![provide case details](../images/create-case-details.png)
![provide case details](./images/create-case-details.png)

Once `case` details filled, finally clic on *Create case* button.
4 changes: 2 additions & 2 deletions docs/thehive/user-guides/analysts/create-observables .md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ To create an `observable`, open the *Observables list* (*Case > Observables*). y

You will find the *Add observable* button under the *Observables* tab:

![create observable button](../images/create-observable-button.png)
![create observable button](./images/create-observable-button.png)

In the pop-up, you are invited to fill the `observable`(s) details:

Expand All @@ -23,6 +23,6 @@ In the pop-up, you are invited to fill the `observable`(s) details:

Details annoted with a '*' are mandatory. Detail annoted with '**' mean at least.

![create observable](../images/create-observable.png)
![create observable](./images/create-observable.png)

Finally clic on *Create Observable(s)*
8 changes: 4 additions & 4 deletions docs/thehive/user-guides/analysts/create-tasks.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,29 +14,29 @@ The list contains the following information:
- Assignee: The `user` assigned to the `task`
- Actions: Delete, start/close or trigger a `responder` on the `task`

![task list](../images/task-list.png)
![task list](./images/task-list.png)

## Create a task

You can create a `task` in a `case`. you must have the `manageCase` permission (refer to [Profiles and permissions](../../administrators/profiles))

Open your *Task list* and clic *Create task* button. On the top of the *Task list* a ribbon will appear, inviting you to fill the *Task group* and the *Task title*

![create task button](../images/create-task.png)
![create task button](./images/create-task.png)

## Task information

Open your `task` to retrieve it's information (*Case > Tasks > Task*)

![task information](../images/task-information.png)
![task information](./images/task-information.png)

### Task Actions

Open your `task` to find the possible actions (*Case > Tasks > Task*)

Task actions buttons are on the top-right of a *Task page*:

![task actions](../images/task-actions.png)
![task actions](./images/task-actions.png)

You can trigger the following actions on a `task`:

Expand Down
4 changes: 2 additions & 2 deletions docs/thehive/user-guides/analysts/export.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,8 @@ You also must have a *MISP* instance connected to your TheHive (refer to [MISP C

Trigger the *Export* button on a `case` action ribbon (*Case > Export*):

![case export button](../images/case-export.png)
![case export button](./images/case-export.png)

In the *MISP export* pop-up, you can chose the *MISP* instance(s) where you want to export your `case`. Clic the *Export* button to send your `case` to the *MISP* instance.

![case export pop-up](../images/case-export-instance.png)
![case export pop-up](./images/case-export-instance.png)
14 changes: 7 additions & 7 deletions docs/thehive/user-guides/analysts/run-analyzers.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,27 +10,27 @@ You can trigger an `analyzer` on a single `observable` from it's page (*Case > O

In the *Analysis* section, you'll find every `analyzers` available for your `organisation` and compatible with the `observable` `dataType`:

![Analysis section](../images/analysis.png)
![Analysis section](./images/analysis.png)

On the right side of the *Analysis* section, you can trigger the `analyzers` of your choice by clicking on the fire button, or run them all via the button *Run all*:

![run analysis](../images/trigger-analysers.png)
![run analysis](./images/trigger-analysers.png)

## From the observables list

You can also trigger one or more `analyzers` on one or more `observables` from the *Observables list* (*Case > Observables*)

On the left side of the *Observables list*, you have checkboxes to select which `observables` to act on. You can even select all of them using the checkbox that is at the very top of the *Observables list*:

![observables checkboxes](../images/checkboxes-observables-list.png)
![observables checkboxes](./images/checkboxes-observables-list.png)

Once selected, clic on the *Selected observables* menu, and chose *Run analyzers*:

![selected observables](../images/selected-observables.png)
![selected observables](./images/selected-observables.png)

Finally select the desired `analyzers` to trigger and clic *Run selected analyzers*:

![select analyzers](../images/select-analyzers.png)
![select analyzers](./images/select-analyzers.png)

## Consult analyzers report

Expand All @@ -40,10 +40,10 @@ Once the `analyzer` has been triggered and the job terminated, you can consult t

In the *Observables list* (*Case > Observables*), you have access to a `short report`:

![short report](../images/short-report.png)
![short report](./images/short-report.png)

### Long report

On the *Observable page* (*Case > Observables > Observable*), in the *Analysis* table, you can consult a HTML formatted `long report` by clicking on the analysis link:

![long report link](../images/long-report-link.png)
![long report link](./images/long-report-link.png)
10 changes: 5 additions & 5 deletions docs/thehive/user-guides/analysts/run-responders.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,31 +17,31 @@ You can trigger a `responder` from a `case`.

On the `case` *Action ribbon*, trigger the *Responders* button

![trigger responder cases](../images/trigger-responder-cases.png)
![trigger responder cases](./images/trigger-responder-cases.png)

## From a task

You can trigger a `responder` from a `task` (*Case > Tasks > Task*)

On the `task` *Action ribbon*, trigger the *Responders* button.

![trigger responder task](../images/trigger-responder-task.png)
![trigger responder task](./images/trigger-responder-task.png)

## From a task log

You can trigger a `responder` from a `task log` (*Case > Tasks > Task > Task log*)

On the `task log` *Action ribbon*, trigger the *Responders* button.

![trigger responder task](../images/trigger-responder-task-log.png)
![trigger responder task](./images/trigger-responder-task-log.png)

## From an observable

You can trigger a `responder` from an `observable` (*Case > Observables > Observable*)

On the `observable` *Action ribbon*, trigger the *Responders* button.

![trigger responder observable](../images/trigger-responder-observable.png)
![trigger responder observable](./images/trigger-responder-observable.png)


## Consult responder report
Expand All @@ -55,4 +55,4 @@ The report is visible in the object where you triggered it (`case`, `observable`

In addition of the status, a text report is provided allowing you to know what happens:

![responder report](../images/report-responder.png)
![responder report](./images/report-responder.png)
12 changes: 6 additions & 6 deletions docs/thehive/user-guides/analysts/sharing.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,36 +21,36 @@ When you share a `case`, you have to chose:
- To share `tasks` or not
- To share `observables` or not

![share case](../images/share-case.png)
![share case](./images/share-case.png)

## Share a task

You can share a `task` (the `case` have to be shared too for this functionnality to be available)

At the very bottom of a *Task page* (*Case > Observables > Observables*), in the section *Task sharing*, clic on *Add share*

![add share task button](../images/add-share-task.png)
![add share task button](./images/add-share-task.png)

Then you can select to which `organisation` you will share the `task`:

![task sharing](../images/share-task.png)
![task sharing](./images/share-task.png)

## Share an observable

You can share an `observable` (the `case` have to be shared too for this functionnality to be available)

At the very bottom of a *Observable page* (*Case > Observables > Observable*), in the section *Sharing*, clic on *Add share*

![add share button](../images/add-share-task.png)
![add share button](./images/add-share-task.png)

Then you can select to which `organisation` you will share the `observable`:

![observable sharing](../images/share-task.png)
![observable sharing](./images/share-task.png)

## Delete a share

You can cancel the share of an object.

For each object type, go to the *Share list* and trigger the *Delete* button in the *Actions* column:

![delete a share](../images/manage-shares.png)
![delete a share](./images/manage-shares.png)
6 changes: 3 additions & 3 deletions docs/thehive/user-guides/analysts/ttps.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ To manage a `case` `TTPs`, you must have the `manageCase` permission (refer to [

To add a `TTP` to a `case`, go to the *TTPs list* (*Case > TTPs*) then clic the *Add TTP* button:

![add TTP button](../images/ttp-add-button.png)
![add TTP button](./images/ttp-add-button.png)

In the *Add Tactic, Technique and Procedure* pop-up, you can select:

Expand All @@ -19,15 +19,15 @@ In the *Add Tactic, Technique and Procedure* pop-up, you can select:

Finally, clic on *Add TTP* in the bottom of the pop-up:

![TTP selection](../images/ttp-selection.png)
![TTP selection](./images/ttp-selection.png)

## Delete a TTP from a case

You can delete a `TTP` from a `case`.

Go to the *TTPs list* (*Case > TTPs*), then clic on the *Delete* button in the *Actions* column:

![TTP deletion](../images/delete-ttp.png)
![TTP deletion](./images/delete-ttp.png)



Original file line number Diff line number Diff line change
Expand Up @@ -55,15 +55,15 @@ You can edit the following user information from the user list (*Organisation >

To edit an `user` information, clic the *Edit user* button on the *Actions* column:

![edit user](../images/edit-user.png)
![edit user](./images/edit-user.png)

### Lock an user

Locking an `user` make the account unusable for any action. You can lock an `user` from the User list (*Organisation > Users*).

To lock an `user`, clic on the lock button:

![lock user](../images/lock-user.png)
![lock user](./images/lock-user.png)

### Delete an user

Expand All @@ -79,4 +79,4 @@ Deleting an `user` is irrevocable. Recreating an `user` with the same informatio

To delete an user, clic on the trash icon:

![delete user](../images/delete-user.png)
![delete user](./images/delete-user.png)

0 comments on commit 3e84d94

Please sign in to comment.