Setup New Server

In this section, you can find information about configuring the MISP integration. MISP and TheHive can interact between each other in both ways:

• TheHive is able to import events from a MISP instance as alerts and create cases from them.

• TheHive is able to export a case into MISP as an event and update it with the artifacts flagged as IOC as MISP attributes.

Add a new server

To set up a new server:

1. On the Platform Management page, in the MISP tab, click the + button.

   

   Set up the new server window opens.

   

2. In the General settings section, Enter the Server name, Server url, and API key.

3. Select the Purpose from the list.

   

4. In the Proxy settings section, select the Type of protocol from the list.

   

5. Enter the Address.

6. Switch on the buttons for Athentification, Do not check certificate authority, and Disable hostname verification if required.

7. In the Advanced settings section, select the filter for the TheHive organizations from the list.

   

   You can make the server available only to selected organizations or make it available to all organizations.

8. Click the Update button.

   Do you want to save the modifications message appears.

   

9. Click Confirm.

   MISP configuration successfully saved message appears.

   

Delete a MISP Server

1. On the Platform Management page, in the MISP tab, click the ellipsis(...) corresponnding to the server you want to delete.

   

   A delete confirmation dialog box appears.

   

2. Click OK.

   Do you want to save the modifications message appears.

   

3. Click Confirm.

   MISP configuration successfully saved message appears.

   

Edit MISP Server

1. On the Platform Management page, in the MISP tab, click the server name you want to edit.

   

   Set up the server for that particular server window opens.

   

2. Edit the required details.

3. Click Update.

   Do you want to save the modifications message appears.

   

4. Click Confirm

   Cortex configuration successfully saved message appears.