Object Relationships Visibility Options
Default ThreatQ Role: Administrative, Maintenance, or Primary Contributor
Custom Role - Action Permissions: Artifact Management - Investigations
You can expand and hide an object's relationships on the Evidence Board.
The evidence board and object details menu display a maximum of 2,000 relationships per object and an overall maximum of 25,000 relationships. If the objects in your investigation exceed these maximums, you can view the full list of relationships in the correspond object details pages.
Viewing an Object's Relationships on the Evidence Board
After you add an object to the evidence board, you can view the object's relationships to other nodes, such as attributes and related indicators.
- On the evidence board, select and highlight the node that represents the object you want to manage.
- Right-click and select Expand > <Object Type> or Attributes.
The node view expands to include related objects and attributes.
Hiding an Object's Relationships on the Evidence Board
You can hide an object's relationships on the evidence board. This does not delete the related objects and attributes from the object or investigation.
The following steps outline two methods to hide the related objects and attributes.
Right-Click Menu
- Click on the relation object's node on the evidence board.
You can select multiple node holding down the Ctrl key and clicking on the related nodes you want to hide.
- Right click on the node and select Remove.
Investigation Object Details Menu
- Click on the parent object node for the related objects and attributes.
- Click on the X icon next to each object under the Relationships heading in the right pane window.