Introduction

TheHive is a scalable, open source and free Security Incident Response Platform designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with security incidents that need to be investigated and acted upon swiftly.

TheHive supports differents roles for users. Depending on your role, you can have access and run differents actions in the platform.

Administrators are users defined in the admin organisation, created by default in TheHive. Administators have the responsibility of managing the platform by defining organisations and all the platform data available for to all the organisations.

This user guide aims at describing all major howtos for Administrators.