cyber-urvesh / opensoc-hivecortex

Open SOC (Security Operations Center)

This repository contains all the essential and required configurations to setup a full fleged in house open source security opreations center. This setup uses Elasticsearch (ELK) as SIEM, TheHive4 for case management and Cortex for automations (analyzers & responders).

Roadmap

• Shuffle Integration
• MISP integration with Cortex

Deployment

Create the Network: Run the following command to create the Docker network named thehive_network:

docker network create thehive_network

  IN PROGRESS

Badges

Authors

• @cyber-urvesh

Contributing

Contributions are always welcome! See contributing.md to get started.