[Sharing experience in TheHive 4] observables from case

[torsolaso]

Continuing with tests, i would like to open the discussion with tagging and comments when you as user are working on a case. If you discover the same observable you got a correlation and the observable is not able to mark.

In my opinion could be interesting to have the capibilities to update the observable for example tagging the finding and append Observable tracking description.

Community, what do you think about this user experience?

[torsolaso]

For example if you are investigating an IP and you have 5 analyzers requesting five differentes firewalls maybe when you are analazing youts results an observable with five tags give you contextual information.