TheHive is a Collaborative Case Management Platform, now distributed as a commercial version

Cortex: a Powerful Observable Analysis and Active Response Engine

ThePhish: an automated phishing email analysis tool

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

A knowledge base of actionable Incident Response techniques

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Cortex Analyzers Repository

This project is a SIEM with SIRP and Threat Intel, all in one.

Documentation of TheHive

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Python API Client for TheHive

A curated list of awesome things related to TheHive & Cortex

Threat Feed Aggregation, Made Easy

All-in-one bundle of MISP, TheHive and Cortex

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Shodan Monitoring integration for TheHive.

Docker configurations for TheHive, Cortex and 3rd party tools

SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incident response. It enriches alerts using VirusTotal & AbuseIPDB, creates incidents in TheHive, and sends real-time Discord notifications.

Open-source AI-augmented Security Operations Center using LLMs + Multi-Agent Orchestration | Foundation-Sec-8B | Wazuh | TheHive | RAG

Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform

Technical add-on for Splunk related to TheHive/Cortex from TheHive project

No description available

DigitalShadows Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform

Zerofox Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform

Create alerts in The Hive from your Graylog alerts, to be turned into Hive cases.

Wazuh integration TheHive

Advanced professional graphical osint toolset with The Hive Remastered

This project automates SOC workflows using Wazuh, Shuffle, and TheHive. It involves setting up a Windows 10 client with Sysmon and Ubuntu 22.04 for Wazuh and TheHive, deployed on cloud or VMs. Goals: automate event collection, alerting, and incident response to enhance SOC efficiency.

pollen - A command-line tool for interacting with TheHive

No description available