TheHive 5 Documentation

Units time to

Initializing search

Home
TheHive
Cortex
Cortex Neurons
Resources

TheHive 5 Documentation

Home
TheHive
TheHive
- Overview
- Download
- Installation
  Installation
  - System Requirements
  - Automated Installation Script
  - Step-by-Step Installation Guide
  - Deploying a Cluster
  - Running with Docker
  - Kubernetes Deployment
  - Activating TheHive License
  - Version Upgrades
    Version Upgrades
    
    Upgrade from Version 5.x
    
    Upgrade from Version 4.x
    
    Migration from TheHive 3.x
  - Archives
- Configuration
  Configuration
- Operations
  Operations
  - Cassandra Cluster Operations
  - Cassandra Security Operations
  - MinIO Cluster Operations
  - Backup & Restore Operations
    Backup & Restore Operations
    
    Overview
    
    Backup Process
    Backup Process
    
    Physical Server
    
    Virtual Server
    
    Docker Compose
    
    Hot backups
    
    Restore Process
    Restore Process
    
    Physical Server
    
    Virtual Server
    
    Docker Compose
    
    Cloud Infrastructure
    
    Restore hot backups
  - Index Management
  - Troubleshooting Guide
  - Monitoring Setup
- Administration Guides
  Administration Guides
  - TheHive - First Start
  - Organizations
    Organizations
    
    About Organizations
    
    About Organizations Sharing Rules
    
    Create an Organization
    
    Add Users to an Organization
    
    Link an Organization
    
    Lock an Organization
  - Manage Accounts
    Manage Accounts
    
    Account Creation/Update Guide
  - Platform Management
    Platform Management
    
    Branding Guide
    
    License Management
    
    Cortex Integration
    
    MISP Integration
    
    Email Intake Connector
    
    Authentication Settings
    Authentication Settings
    
    Configure Authentication
    
    Configure Providers
    Configure Providers
    
    Local
    
    Active Directory (AD)
    
    LDAP
    
    OAUTH 2.0
    
    SAML
    
    Configure SSL
    
    SMTP Configuration
  - Entities Management
    Entities Management
    
    Profiles
    
    Custom Fields
    Custom Fields
    
    About Custom Fields
    
    Create a Custom Field
    
    Observable Types
    
    Case Status
    
    Alert Status
    
    Analyzers Templates
    
    Taxonomies
    
    Att&ck Patterns
  - How To
    How To
    
    Fail2ban Configuration
    
    Notification Configuration
    
    Splunk Integration Guide
- User Guides
  User Guides
  - Forgot Password Guide
  - Key Performance Indicators
    Key Performance Indicators
    
    About KPIs
    
    KPIs Formulas
    
    Hide KPIs
    
    Measure Case Management Performance
    
    Measure Alert Management Performance
  - Organization Administration
    Organization Administration
    
    User
    
    Templates
    Templates
    
    Case Templates
    Case Templates
    
    About Case Templates
    
    Create a Case Template
    
    Edit a Case Template
    
    Delete a Case Template
    
    Export a Case Template
    
    Import a Case Template
    
    Page Templates
    Page Templates
    
    Page Templates Management
    
    Case Report Templates
    Case Report Templates
    
    About Case Report Templates
    
    About Widgets
    
    Create a Case Report Template
    
    Edit a Case Report Template
    
    Delete a Case Report Template
    
    Custom Tags
    
    UI Configuration
    
    Notifications & Endpoints
    Notifications & Endpoints
    
    Introduction to Notifications & Endpoints
    
    Notifier Configuration
    Notifier Configuration
    
    Mattermost Configuration
    
    MS Teams Configuration
    
    Slack Configuration
    
    Kafka Configuration
    
    Redis Configuration
    
    Filtered Events Setup
    
    Endpoints
    Endpoints
    
    About Endpoints
    
    Add Endpoints
    
    Functions
    
    Attachments
  - Analyst's Corner
    Analyst's Corner
    
    Alerts Management
    Alerts Management
    
    About Alerts
    
    Search for Alerts
    Search for Alerts
    
    Find an Alert
    
    Overview of Search Methods for Alerts
    
    Manage Views
    
    Preview Alerts
    
    Actions on Alerts
    
    Merge Alerts
    
    Create a Case from Alerts
    
    View Alert Details
    
    Run Responders on Alert
    
    View Responders
    
    View Similar Alerts
    
    View Similar Cases
    
    View TTPs
    
    View Observables
    
    Cases Management
    Cases Management
    
    About Cases
    
    Search for Cases
    Search for Cases
    
    Find a Case
    
    Overview of Search Methods for Cases
    
    Find an Observable
    
    Find a Job
    
    Create a Case
    
    Export an Archived Case
    
    Export a Case to MISP
    
    Apply a Case Template
    
    Manage Views
    
    Preview Cases
    
    Actions on Cases
    
    View a Case
    
    Adding to a Case (Tags/Tasks/Custom Field Values)
    
    Share a Case with Other Organizations
    
    Share an Observable with Other Organizations
    
    View Tasks
    
    View Observables
    
    View TTPs
    
    View Attachments
    
    View Timeline
    
    View Pages
    
    Run Responders on Case
    
    Run Analyzers on Case
    
    Tasks Management
    Tasks Management
    
    About Tasks
    
    Search for Tasks
    Search for Tasks
    
    Find a Task
    
    Overview of Search Methods for Tasks
    
    Find a Task Log
    
    Manage View
    
    Preview Tasks
    
    Actions on Tasks
    
    Run Responders from Task
    
    Share a Task with Other Organizations
    
    Dashboard Usage
    Dashboard Usage
    
    About Dashboard
    
    Manage Dashboard
    
    Manage View
    
    Filter and Sort
    
    Choose Your Theme
- API
  API
  - API Documentation
  - Python Client
- Release Notes
  Release Notes
Cortex
Cortex
- Home
- Download
  Download
  - Downloading Cortex
- Installation & configuration
  Installation & configuration
- User Guides
  User Guides
  - First start
  - User roles
- Operations
  Operations
- API
  API
Cortex Neurons
Resources
Resources
- Resources
- TheHive templates
- Demo Virtual Machine
  Demo Virtual Machine
  - How to download the VM
  - Use the Demo Virtual Machine
- IaaS deployment
  IaaS deployment
  - Amazon AWS
    Amazon AWS
    
    Main Features
    
    Deploy TheHive AMI
    
    Deploy Cortex AMI
    
    AWS sample code
    
    Create and manage the SecOps VPC
    
    TheHive v5 and Cortex within a SecOps VPC
  - Microsoft Azure
    Microsoft Azure
    
    Main Features
    
    Deploy TheHive Azure image
    
    Deploy Cortex Azure image
    
    Azure sample code
    
    Creating a new SecOps Virtual Network
    
    Deploying TheHive v5 and Cortex with Terraform
    
    Upgrading your Azure instances
- Open source projects
  Open source projects
  - SDK
    SDK
    
    TheHive4py
    
    Cortex4py
    
    Cortexutils
- Security

Units time to

Units

If the unit of an indicator is not explicitly mentioned, values are in milliseconds.

Copyright 2025 StrangeBee. All rights reserved.