TheHive: a Scalable, Open Source and Free Security Incident Response Platform

Cortex: a Powerful Observable Analysis and Active Response Engine

ThePhish: an automated phishing email analysis tool

Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

A knowledge base of actionable Incident Response techniques

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Cortex Analyzers Repository

This project is a SIEM with SIRP and Threat Intel, all in one.

Documentation of TheHive

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Python API Client for TheHive

All-in-one bundle of MISP, TheHive and Cortex

Threat Feed Aggregation, Made Easy

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Shodan Monitoring integration for TheHive.

Docker configurations for TheHive, Cortex and 3rd party tools

SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incident response. It enriches alerts using VirusTotal & AbuseIPDB, creates incidents in TheHive, and sends real-time Discord notifications.

Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform

Zerofox Alert Feeder for TheHive, an Open Source and Free Security Incident Response Platform