TheHive
Incident Response · Advanced
Case management for security incidents.
Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.
What to learn
- Alerts
- Observables
Example commands (lab VMs only)
- Create case from SIEM alertTriage workflow