TheHive

Kali Purple offers TheHive as an open source Security Incident Response Platform (SIRP). TheHive now falls under the umbrella of a company called StrangeBee. StrangeBee was co-founded by Jerome Leonard, Nabil Adouani, and Thomas Franco, who are also TheHive’s creators. Also falling under StrangeBee is a product called Cortex, which should be quite familiar to you since we just discussed it in the previous section. TheHive is a SIRP that was built to integrate with Cortex and also with the extremely well-known MISP. If you presently work in a cybersecurity profession, odds are you’ve already worked with MISP. We will cover that in the next section.

TheHive was built to streamline the process of managing security incidents. The creators realized the best way to achieve streamlining was to ensure everybody had access to the same threat data, hence the integration with the MISP, which was built specifically for that purpose. TheHive is equipped with a comprehensive...