Leveraging TheHive & Cortex for automated IR
TheHive is a scalable, open source and free Security Incident Response Platform, tightly integrated with MISP (Malware Information Sharing Platform), designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with security incidents that need to be investigated and acted upon swiftly. One of the key strengths of TheHive is the link with Cortex and its Analyzers and Responders. Analysts can automate the response to existing cases by initiating one or more Responders. This webcast will show the basic features of TheHive and how custom Responders can be developed in Cortex to facilitate automated responses.
