--- title: "Artifact Administrative Options | ThreatConnect" slug: "artifact-administrative-options" description: "This article describes the administrative options available when you click the vertical ellipsis in the rightmost column of the table on the Artifacts card of a Workflow Case." tags: ["Case Management", "Markdown"] updated: 2023-04-12T14:15:07Z published: 2023-04-12T14:15:07Z --- > ## Documentation Index > Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt > Use this file to discover all available pages before exploring further. # Artifact Administrative Options The vertical ellipsis menu in the rightmost column for an Artifact provides six administrative options for the Artifact (Figure 1). ![Graphical user interface, table Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/artifact-administrative-options-image-1oo1hhf9.png) ## Add Note Select **Add Note**to add a [Note](/v1/docs/case-notes) to the Case that will be linked to the Artifact. The **Create Note**drawer will be displayed (Figure 2). ![Graphical user interface, text, application, Teams Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/artifact-administrative-options-image-01iwwg2d.png) - Enter the contents of the Note in the text box, either in plain text or in [Markdown](https://www.markdownguide.org/).NoteThe text box displayed in the **Create Note**drawer supports the Marked library ([https://marked.js.org/](https://marked.js.org/)). - Click the **CREATE**button. The Note will be added to the Case and displayed in the [**Notes** card](/v1/docs/case-notes), with a link to the Artifact. ## Copy hash code Select **Copy hash code**to copy the hash code for the Artifact (including Artifacts that have String values, such as Addresses) to the clipboard—for example, to paste and send to a System Administrator for addition to an exclusion list. ## Edit Select **Edit**to edit the Artifact. The **Edit Artifact**drawer will be displayed (Figure 3). ![Graphical user interface, application, email Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/artifact-administrative-options-image-n131a1ds.png) - Edit the Artifact as desired. For an explanation of each option available on this drawer, see [*Adding Artifacts to a Case*](/v1/docs/adding-artifacts-to-a-case). Note that you cannot change an existing Artifact’s type. - To add a new Note to the Artifact, click **Add****![Icon Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/artifact-administrative-options-image-h2hq6vge.png)**at the bottom right of the **Edit Artifact**drawer. The **Create Note**drawer will be displayed. See the [“Add Note” section](/docs/artifact-administrative-options#add-note) for more information about adding a Note to an Artifact. - Click the **SAVE**button to save the edits. ## Remove Select **Remove**to delete the Artifact. The **Remove Artifact**window will be displayed. Click the **CONFIRM**button to delete the Artifact from the Case. ## Run Playbook Select **Run Playbook**to run a [Workflow Playbook](/v1/docs/workflow-playbooks) on the Artifact. The **Run Playbook**drawer will be displayed, showing all Workflow Playbooks in your Organization (Figure 4). ![Table Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/artifact-administrative-options-image-qx0l13q3.png) Select a Playbook to run on the Artifact. The **Run Playbook**drawer will display the required inputs for that Playbook, with the selected Artifact highlighted in the table of Artifacts on the bottom right of the drawer (Figure 5). NoteIf you try to select an inactive Playbook, like the **Phishing Alert Playbook** in Figure 4, a message will be displayed stating you can select only an active Playbook. This message will include a link to open the selected Playbook in the [**Playbook Designer**](/v1/docs/the-playbook-designer) in a new browser tab. After activating the selected Playbook, return to the browser tab with the **Run Playbook** drawer open and click **REFRESH** to refresh the list of Playbooks so that the Playbook's status updates to **Active**. ![Graphical user interface, table Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/artifact-administrative-options-image-oubkys7z.png) - Fill in all required input fields. Note that you can use the **Filter**field to filter Artifacts by keyword, if desired. Similarly, click the **Show Variables**link to view all variables in your Organization, if desired. - Click the **OUTPUTS**> link at the bottom right of the drawer. The drawer will display all outputs that the Playbook will produce (Figure 6). ![Graphical user interface, text, application Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/artifact-administrative-options-image-5eiphqtj.png) To save an output as an Artifact, toggle the **Save to Artifact**slider on. Fields for configuring the Artifact will be displayed (Figure 7). ![Graphical user interface, application Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/artifact-administrative-options-image-g6x3kkz2.png) - **Artifact Name**: Enter a name for the Artifact. - **Artifact Type**: Select the type of Artifact being saved. Only Artifact types that map to the output’s data type (**String**in this example) will be displayed in the **Artifact Type**dropdown. - **Configure Artifact**: Select the failure option(s) for the Playbook. Note that no selection is required for this field, and more than one option may be selected. Available options include: - **Output is required**: Select this option to make the Playbook fail if it does not produce any output. - **Fail playbook if artifact validation fails**: Select this option to make the Playbook fail if it produces output that fails Artifact validation. - Click the **RUN**button to run the Playbook. ## Show in Timeline Select **Show in Timeline**to filter the Case’s [**Timeline**card](/v1/docs/timeline-events) to display Timeline Events related to the Artifact (Figure 8). ![Graphical user interface, text, application, email Description automatically generated](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/artifact-administrative-options-image-d3ordqf4.png) --- *ThreatConnect® is a registered trademark of ThreatConnect, Inc.* 20123-04 v.02.B