Skip to content

TheHive Connectors#

TheHive comes with built-in connectors to seamlessly integrate with Cortex and the Malware Information Sharing Platform (MISP).

Cortex support

5.5 Cortex 3.1.5 and earlier are no longer supported since version 5.5.

By default, these connectors are enabled in the /etc/thehive/application.conf configuration file. However, if you are not using one or both of these integrations, you can easily disable them by commenting out the relevant line(s):

/etc/thehive/application.conf
[..]
scalligraph.modules += org.thp.thehive.connector.cortex.CortexModule
# scalligraph.modules += org.thp.thehive.connector.misp.MispModule  # (1)
  1. The line for the MISP connector has been commented out, indicating that it is disabled.

Updating this configuration file requires restarting TheHive service for the changes to take effect.