New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sort related cases by related artifacts amount #548

Closed
srilumpa opened this Issue Apr 19, 2018 · 3 comments

Comments

Projects
None yet
2 participants
@srilumpa
Contributor

srilumpa commented Apr 19, 2018

Sort related cases by related artifacts count

Request Type

Feature Request

Work Environment

Question Answer
OS version (server) Debian
TheHive version / git hash 3.0.1
Package Type DEB

Problem Description

Currently, all related cases are sorted by creation date. It would be helpful to be able to sort this list by related artifacts amount.

For example, a phishing email case can be related to tens of other cases simply because of an email address. But among all those related cases, there is only one with same attachment (i.e. same filename and hash). Having this case on top of the list would save time and potentially reduce human errors.

It could also improved by taking in account that a related artifact is flagged as an IOC, either by giving more "weight" to the artifact when counting them or simply by adding a third sort based taking in account only the fact that the artifact is an IOC or not.

Having a dropdown list to select the kind of sort to be applied would be great.

@nadouani

This comment has been minimized.

Contributor

nadouani commented May 2, 2018

Are you talking about "Related cases" of a Case or of an Alert.

What page are you referring to?

@srilumpa

This comment has been minimized.

Contributor

srilumpa commented May 2, 2018

I am talking about "related cases" of a case. The page is the "Related Cases" tab when opening a case details page.

thehive_related_cases

@nadouani

This comment has been minimized.

Contributor

nadouani commented May 2, 2018

OK, so adding the sort capabilities to that list will save the issue

@nadouani nadouani added this to the 3.0.10 milestone May 2, 2018

@nadouani nadouani self-assigned this May 2, 2018

@nadouani nadouani closed this May 3, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment