thehive 开源项目推荐（183 个）

TheHive-Project /TheHive

TheHive is a Cybersecurity Incident Response Management (CIRM) platform, now distributed commercially. Learn more on the official website:

TheHive-Project /Cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

thalesgroup-cert /Watcher

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

emalderson /ThePhish

ThePhish: an automated phishing email analysis tool

atc-project /atc-react

A knowledge base of actionable Incident Response techniques

Patrowl /PatrowlManager

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

TheHive-Project /Cortex-Analyzers

Cortex Analyzers Repository

V1D1AN /S1EM

该项目是一体化的 SIEM，集成 SIRP 与威胁情报。

TheHive-Project /TheHiveDocs

Documentation of TheHive

TheHive-Project /TheHive4py

Python API Client for TheHive

Patrowl /PatrowlEngines

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

pe3zx /mthc

All-in-one bundle of MISP, TheHive and Cortex

TheHive-Project /Hippocampe

Threat Feed Aggregation, Made Easy

Patrowl /PatrowlDocs

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

malwarekid /SOAR-Flow

SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incident response. It enriches alerts using VirusTotal & AbuseIPDB, creates incidents in TheHive, and sends real-time Discord notifications.

TheHive-Project /Docker-Templates

Docker configurations for TheHive, Cortex and 3rd party tools

kaansk /shomon

Shodan Monitoring integration for TheHive.

TheHive-Project /Synapse

Synapse: a Meta Alert Feeder for TheHive, a Security Incident Response Platform

CERT-Polska /training-materials

该项目在 GitHub 上没有填写描述

uruc /SOC-Automation-Lab

This project automates SOC workflows using Wazuh, Shuffle, and TheHive. It involves setting up a Windows 10 client with Sysmon and Ubuntu 22.04 for Wazuh and TheHive, deployed on cloud or VMs. Goals: automate event collection, alerting, and incident response to enhance SOC efficiency.