How to Add a Cortex Server#
This topic provides step-by-step instructions for adding a Cortex server in TheHive.
Requirements
Before adding a Cortex server, you must install and configure Cortex. For instructions, refer to the Installation and Configuration Guides.
Cortex support
5.5 Cortex 3.1.5 and earlier are no longer supported since version 5.5.
Required permissions
Only users with an admin-type profile that has the managePlatform permission can manage the Cortex connection in TheHive.
Procedure
-
Go to the Platform management view from the sidebar menu.
-
Select the Connectors tab.
-
Select the Cortex tab.
-
In the Servers section, select .
-
In the Set up a new server drawer, enter the following information:
- Server name
The name of the connection. If you have multiple connections, use explicit names for clarity.
- Server URL
The URL of the Cortex server to connect to.
Example: https://cortex.mycompany.com
- API key
The API key associated with the dedicated Cortex account.
-
In the Proxy settings section, select the proxy settings you want to apply:
- Default configuration
- Disabled
- Enabled:
- Enter the type of protocol, either HTTP or HTTPS.
- Enter the IP address or domain name of the proxy server.
- Enter the port number used by the proxy server.
- Turn on the Authentication toggle if you want to require a username and password to authenticate with the proxy server.
-
Add a certificate authority.
For more information about configuring SSL, refer to the Configure SSL topic.
Use certificates only from trusted, predefined authorities for secure connections. Custom certificate authorities are not allowed.
You can turn off the Don't check certificate authority toggle to bypass certificate validation, but this isn't recommended as it may compromise connection security.
-
Turn on the Disable host name verification toggle if you want to bypass the verification of the server's host name against the certificate.
-
Select the organizations to share your connection with using the Choose the filter on TheHive organizations dropdown.
By default, all analyzers and responders provided by Cortex are available to all organizations.
-
Select Test server connection to verify your connection.
-
Select Add.