thehive

TheHive is a Collaborative Case Management Platform, now distributed as a commercial version

Cortex: a Powerful Observable Analysis and Active Response Engine

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

ThePhish: an automated phishing email analysis tool

A knowledge base of actionable Incident Response techniques

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Cortex Analyzers Repository

This project is a SIEM with SIRP and Threat Intel, all in one.

Documentation of TheHive

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Python API Client for TheHive

Threat Feed Aggregation, Made Easy

All-in-one bundle of MISP, TheHive and Cortex

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incident response. It enriches alerts using VirusTotal & AbuseIPDB, creates incidents in TheHive, and sends real-time Discord notifications.

Shodan Monitoring integration for TheHive.

Docker configurations for TheHive, Cortex and 3rd party tools

Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform

This project automates SOC workflows using Wazuh, Shuffle, and TheHive. It involves setting up a Windows 10 client with Sysmon and Ubuntu 22.04 for Wazuh and TheHive, deployed on cloud or VMs. Goals: automate event collection, alerting, and incident response to enhance SOC efficiency.