Skip to main content

The Hive

Import cases, alerts, tasks & observables from TheHive (v3/v4)

Category: Security & Threat Intel · Authentication: API key / token

Connecting your account

TheHive → your profile → API key.

Credentials needed

FieldRequiredNotes
API KeyYes
URLYesThe URL of TheHive instance — e.g. https://localhost:9000
API VersionNoThe version of api to be used
Ignore SSL Issues (Insecure)NoWhether to connect even if SSL certificate validation is not possible

Available data to import

Once connected, choose from these resources when setting up an import:

ResourceWhat it imports
CasesAll cases records
AlertsAll alerts records
TasksAll tasks records
ObservablesAll observables records
Task logsAll task logs records (you'll be asked to pick a task)

This page is generated from Brooked's connector definition for thehive. Found an error? Open an issue or send a PR.