July 2018
Intermediate to advanced
356 pages
9h 18m
English
Content preview from Hands-On Security in DevOps
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
TheHive
TheHive is a security incident response platform that integrates Malware Information Sharing Platform (MISP). The Cortex can help to analyze observables using external threat analysis services such as VirusTotal, DomainTools, and MaxMind. The Hippocampe provides the REST API or Web UI to enable users to carry out analysis reports and perform queries.
The following diagram shows the collaboration between TheHive, Cortex, SIEM, and also MISP: