Documentation of TheHive

A curated list of awesome things related to TheHive & Cortex

Documentation of Cortex

All-in-one bundle of MISP, TheHive and Cortex

Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform

Please use https://github.com/veeral-patel/true-positive instead

Create alerts in The Hive from your Graylog alerts, to be turned into Hive cases.

TIBER-Cases is a project created to give cases of The Hive platform for Threat Intelligence Analysts mainly. All the cases are mapped to TIBER-EU processes.

A repository to share contributions related to TheHive Project

Resources Hive recent mode, geo, data, texture pack, animation geo, and logo.

Powershell Functions to interact with TheHive-Project

Crowdstrike Falcon streaming api client in python

Query and cross-check TheHive (SIRP) alerts based on set severity statuses, and automatically perform various escalations based on your configuration. Integrates with Slack, Twilio, Flask and TheHive.

Create alerts in The Hive from your Thinkst Canary alerts, to be turned into Hive cases.

This analyzer helps you investigate suspicious emails received from known or unknown senders to ensure that their email addresses aren't compromised.

Create TheHive alerts from Sublime detections effortlessly!

Simple Python flask app that runs as a web server, and accepts POST requests from your Mailgun routes.

Falcon streaming api alert integration for TheHive

With this script, you can automatically send the alarms that occur on "McAfee SIEM" to the "TheHive" platform, the alarms you send will be automatically opened as a case.

Auto Close Hive Cases based on Sentinel One resolution