The Hive and Cortex

Operationalize Your Incident Management Process

Extending our open-source platform support to TheHive and Cortex, information security practitioners can optimize security incident management, automate threat intelligence analysis, and perform digital forensics. The DomainTools® integrations for TheHive and Cortex allow customers to investigate security incidents efficiently. The Analyzers look up domain names, IP addresses, e-mail addresses, SSL hashes, and more leveraging the DomainTools Iris Investigate® API.

Enrich Observables With Ease

Improve the context on an observable by enriching domain artifacts on-demand with domain names, IP addresses, e-mail addresses, SSL hashes, and more.

‍

Discover Connected Infrastructure

Within an incident, have the ability to enrich data in an observable for review of the complete data set, including DomainTools Guided Pivots for associated domain artifacts.

‍

Speed Up Incident Response Orchestration

Automate incident handling procedures and reduce context switching by pivoting on key domain attributes.