---
title: "Removing Objects From Threat Graph"
slug: "removing-objects-from-threat-graph"
description: "This article describes how to remove Indicator, Group, Case, and Tag nodes from Threat Graph."
updated: 2024-09-18T15:16:39Z
published: 2024-09-18T15:16:39Z
canonical: "knowledge.threatconnect.com/removing-objects-from-threat-graph"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Removing Objects From Threat Graph

## Overview

The Threat Graph feature in ThreatConnect® provides a graph-based interface that you can use to discover, visualize, and contextualize associations and relationships between [Indicators](https://knowledge.threatconnect.com/docs/the-threatconnect-data-model#indicators), [Groups](https://knowledge.threatconnect.com/docs/the-threatconnect-data-model#groups), [Cases](https://knowledge.threatconnect.com/docs/workflow-cases), and [Tags](https://knowledge.threatconnect.com/docs/applying-tags). As you pivot in Threat Graph and add objects to the graph, you may want to remove objects that are irrelevant or no longer of interest to you. Doing so helps declutter the graph and ensure you focus on the objects that matter most to your investigation.

## Before You Start

### User Roles

- To remove objects from Threat Graph, your user account can have any [Organization role](https://knowledge.threatconnect.com/docs/organization-roles).

## Removing Graph Objects

The **Graph Objects**drawer (Figure 1) provides two ways to select and remove objects from Threat Graph:

![Figure 1_Removing Objects From Threat Graph_7.7.0](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%201_Removing%20Objects%20From%20Threat%20Graph_7.7.0.png)

- The [**Selection Actions**menu](/docs/removing-objects-from-threat-graph#selection-actions-menu) (remove one or more objects)
- The [**Options**(**⋯**) menu](/docs/removing-objects-from-threat-graph#options-menu) for an object (remove one object)

NoteRemoving an Indicator, Group, Case, or Tag from Threat Graph will neither remove objects associated to it from Threat Graph nor dissociate the removed Indicator, Group, Case, or Tag from its associated object(s).

### Selection Actions Menu

Follow these steps to use the **Selection Actions**menu on the **Graph Objects**drawer to remove one or more objects from Threat Graph:

1. [Open Threat Graph](https://knowledge.threatconnect.com/docs/viewing-an-object-in-threat-graph).
2. Ensure there is at least one other node on the graph in addition to the origin node, as you cannot remove the origin node. If there are no other nodes on the graph except for the origin node, pivot in [ThreatConnect](https://knowledge.threatconnect.com/docs/pivoting-in-threatconnect-in-threat-graph), [CAL](https://knowledge.threatconnect.com/docs/pivoting-with-cal-in-threat-graph)™, or an [enrichment service](https://knowledge.threatconnect.com/docs/pivoting-on-enrichment-services-in-threat-graph) to add nodes.
3. Click **View Table**in the Threat Graph header to open the **Graph Objects**drawer.
4. Select objects in the table on the **Graph Objects**drawer using the following methods:
  - **Select individual objects**: Select the checkbox to the left of an object’s value in the **Type**column to select the object.
  - **Select multiple objects at once**: Select the checkbox to the left of the **Type**column header to select all objects on the current table page.  
HintSelections on one page persist when you navigate to another page, allowing you to select items across multiple pages.
5. Click **Selection Actions**at the top left of the **Graph Objects** drawer and select **Remove from graph**to remove the selected objects and their corresponding nodes from the graph.

NoteWhen you select one or more objects in the table on the **Graph Objects**drawer, the **Selected**button at the top left of the table will show the current number of selected objects. To view only the objects currently selected in the table, click **Selected**.

### Options Menu

Follow these steps to use an****object’s **⋯**menu on the **Graph Objects**drawer to remove the object from Threat Graph:

1. [Open Threat Graph](https://knowledge.threatconnect.com/docs/viewing-an-object-in-threat-graph).
2. Ensure there is at least one other node on the graph in addition to the origin node, as you cannot remove the origin node. If there are no other nodes on the graph except for the origin node, pivot in [ThreatConnect](https://knowledge.threatconnect.com/docs/pivoting-in-threatconnect-in-threat-graph), [CAL](https://knowledge.threatconnect.com/docs/pivoting-with-cal-in-threat-graph), or an [enrichment service](https://knowledge.threatconnect.com/docs/pivoting-on-enrichment-services-in-threat-graph) to add nodes.
3. Click **View Table**in the Threat Graph header to open the **Graph Objects**drawer.
4. On the **Graph Objects**drawer, click the **⋯**menu for an object that does not correspond to the origin node and select **Remove from graph**to remove the object and its corresponding node from the graph.

---

*ThreatConnect® is a registered trademark of ThreatConnect, Inc.*

20117-15 v.01.A