StrangeBee

Cortex

Cortex Analyzers 3.3.8 Release: new tools, fresh upgrades and more!

Cortex Analyzers 3.3.8 is here! New tools like QrDecode, DNSDumpster, and MS Entra ID GetSignIns expand your investigation options, while updates to Crowdsec and RecordedFuture boost performance. New responders, like AWS Lambda and Cloudflare IP Blocker, speed up response. See the full changelog!

Incident Response

Incident response and case management—stronger together

Give cyber threats no power over your systems. Learn why good case management is your best friend for robust incident handling and recovery.

Incident Response

Why using non-dedicated tools for security incident response is a risky bet

Using a ticketing tool, a messaging app, or Spreadsheets for incident response forces analysts into tedious, manual tasks that waste time and risk missing insights. Purpose-built platforms like TheHive optimizes data tracking, allowing analysts to focus on threats, not inefficient tools.

Success stories

How Thales CERT fights typo-squatting with TheHive

Globally distributed teams have specific challenges when it comes to handling typo-squatted domains. Learn how Thales does it with TheHive.

Incident Response

Transforming data overload into actionable intelligence

Learn how TheHive allows you to easily manage alerts, automate triage, reduce false positives and track incidents from start to finish for faster response.

Branding Featured

What’s behind the bee-autiful new logos of StrangeBee

Learn how we came up with the new symbols of StrangeBee, TheHive and Cortex

Release Featured

TheHive 5.4 is out: dark mode, better reporting and more

TheHive 5.4 is here with Dark Mode, a new Report tab, and automation features like the Function Notifier. Stay sharp with a sleek, eye-friendly interface, faster case reporting and automated tasks. It’s all about saving time and making incident response smoother. Try TheHive 5.4 now!

Announcement

Bee-yond the ordinary: meet StrangeBee's new visual identity

It’s about more than buzz-worthy new logos and vibrant colors

Release Featured

Email to alert: how TheHive transforms your workflow

Meet Email Intake in TheHive 5.3. Automatically transform emails into alerts, speeding up investigations and saving analysts time to respond faster.

Announcement Featured

TheHive Cloud Platform is now SOC 2 Type 1 compliant

Deloitte audited the controls safeguarding customer data and system security of StrangeBee’s SaaS solution

Announcement Featured

TheHive 5.3 is out and buzzing for even more efficiency

TheHive 5.3 introduces Email Intake, refined case tracking, and a detailed Timeline widget. It supports OpenSearch and Elasticsearch 8, boosting SOC efficiency.

Case Management

How to choose the best security case management platform for your organization

Learn how to choose reliable software to investigate alerts, facilitate collaboration, and automate incident response

Announcement

Security upgrade: release of TheHive versions 5.2.9 and 5.1.10

Three weeks ago, we released TheHive versions 5.2.9 and 5.1.10. These updates include security enhancements, addressing vulnerabilities identified through our recent comprehensive penetration testing.

Announcement Featured

TheHive 5.2: "reporting" for duty!

Presenting TheHive 5.2: For first-class incident response, demand nothing less than first-class incident reports.

Announcement

TheHive v5.1 elevates cybersecurity incident response to a new level

Once again, TheHive demonstrates how cybersecurity tools should adapt to your environment and processes, not the other way around!

Announcement

TheHive v5.1: New features

In this blog post, we'll take a closer look at the new features included in TheHive v5.1. With case template stacking, mandatory tasks or powerful new functions, you will be(e) prepared to face any incident.

Announcement

TheHive v5.1: Improved features

In this blog post, we'll take a closer look at the latest improvements on existing TheHive features. Because details matter, we are making the features you rely on ever more useful.

analyzers Featured

Cortex-Analyzers – release 3.2

The 3.2.0 release of Cortex-Analyzers repository is available. It includes 13 new and updated connectors like CrowdSec, VirusTotal, EchoTrail, CheckPhish, Verifalia, Kaspersky Threat Intelligence Portal, ThreatMinder, PaloAlto WildFire, Bitcoin Abuse and more.

DFIR

Leveraging TheHive5 notification capabilities (2/2)

Get wind of TheHive 5 notifications capabilities through a couple of lab blog articles. From simple email notification to an automated incident response, learn how to leverage the best of this new functionality ! Second part is out, stay tuned for further articles. Have a good read !

DFIR

Leveraging TheHive 5 notifications capabilities (1/2)

Get wind of TheHive 5 notifications capabilities through a couple of lab blog articles. From simple email notification to an automated incident response, learn how to leverage the best of this new functionality ! First part is out, stay tuned for the second. Have a good read !

Announcement Featured

TheHive 5.0 is now available

We are excited to announce the immediate availability of TheHive 5.0 which brings dozens of new features and improvements. This new version further empowers existing users with core incident response enhancements.

Announcement

TheHive 4.1.16 is out!

TheHive 4.1.16 is out!

log4j

Apache Log4j Vulnerability – CVE-2021-44228 vs. TheHive & Cortex

TheHive and Cortex are not exposed to the vulnerability affecting Apache Log4j and referenced as CVE-2021-44228.

hands-on

Dockerize your custom Analyzers and Responders

If you are using your own programs and want them to be processed as Docker containers, you can. You need to build your images, build your catalog & register it in Cortex.

Thehive Featured

New TheHive and Cortex AMIs now available with improved built-in operation tools

The latest TheHive and Cortex AMIs are now available with new features to make the operations side of things even easier