This repository contains all the essential and required configurations to setup a full fleged in house open source security opreations center. This setup uses Elasticsearch (ELK) as SIEM, TheHive4 for case management and Cortex for automations (analyzers & responders).
- Shuffle Integration
- MISP integration with Cortex
Create the Network: Run the following command to create the Docker network named thehive_network:
docker network create thehive_network
IN PROGRESS
Contributions are always welcome! See contributing.md
to get started.