← All tools

Cortex

SOAR / Analysis · Advanced

Automated analyzers for observables (pairs with TheHive).

Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.

What to learn

  • Analyzers
  • Responders

Legitimate use

Automate enrichment safely.

Official docs →

Example commands (lab VMs only)

  • Run analyzer on file hash
    Enrich observables