Cortex-Analyzers
Cortex-Analyzers copied to clipboard
TheHive-Project
Cortex Analyzers Repository
**Describe the bug** The docker responders for MSDefender can't start due to a missing dependency. (So far, only tested FullVirusScan & PushIOCAlert) **To Reproduce** Steps to reproduce the behavior: 1....
When tried to use EmlParser_1_2 to parser the eml file that it seems it missed to transfer the attachment inside the eml.  hash of attachment is extracted just no...
**Describe the bug** When trying any analyzers this errors pops-up :  `/usr/local/lib/python3.9/dist-packages/urllib3/connectionpool.py:1043: InsecureRequestWarning: Unverified HTTPS request is being made to host 'urlscan.io'. Adding certificate verification is strongly advised. See:...
KnowBe4 responder does not have the options for needed configurations. Referring to this documentation: https://thehive-project.github.io/Cortex-Analyzers/responders/KnowBe4/ there should be options to configure the ```api_url```, ```hive_url```, ```api_key```, etc. However the Responder configuration...
**Describe the bug** The TalosReputation analyser fails to return data and gives an error "Unexpected Error: Detected a Cloudflare version 2 challenge, This feature is not available in the opensource...
**Describe the bug** Hello, i launched a test scan on this hash : 6825716f7a72eedb249630bf9b0331a80cb09db8522f0fccbdcdbbe333c1c2c7 After a few second i had this error :  **To Reproduce** Steps to reproduce the...
Resolves #910 Developed and tested with TheHive v4.1.20-1 and Cortex v3.1.4-1 Manual tests performed: * bad API host in configuration * bad API key in configuration * submitting a benign...
**Feature description** Add a responder to isolate, unisolate, and scan endpoints by their endpoint name or IP address **Describe the solution you'd like** I am writing the responder and will...