Search

Cortex

an observable analysis and active response engine used with TheHive and secur

FreemiumOpen SourceCLI
Visit WebsiteGitHubDocs

Description

Cortex is an observable analysis and active response engine used with TheHive and security workflows. It helps investigators collect, validate, or enrich ioc, ip-address, domain-name during OSINT work and produces evidence such as ioc, threat-actor-profile, report-summary for structured analysis.

Inputs

IOC (Indicator of Compromise)IP AddressDomain NameURLHash (MD5/SHA)

Outputs

IOC (Indicator of Compromise)Threat Actor ProfileReport / Summary

Tags

IOC (Indicator of Compromise)Threat Actor Profile

Tool Chain

Tools that can use this tool's outputs as inputs

Cortex
outputs
IOC (Indicator of Compromise)
inputs into
MITRE ATT&CKFreeMISPFreeOpenCTIFreeYetiFreeTheHiveFreemiumAbuseIPDBFreemiumAlienVault OTXFreePulsediveFreemiumThreatFoxFreeFeodo TrackerFreePhishTankFreeOpenPhishFreemiumCisco Talos IntelligenceFreeIBM X-Force ExchangeFreemiumCyberChefFreeGoogle Safe BrowsingFreemiumMalwarebytes LabsFree
Cortex
outputs
Threat Actor Profile
inputs into
MITRE ATT&CKFree

Reviews

0.0 (0 reviews)