Cortex
Cortex copied to clipboard
Push Templates when Providing Analyzer Results
Request Type
Feature Request
Work Environment
| Question | Answer |
|---|---|
| OS version (server) | Ubuntu |
| OS version (client) | 10 |
| Cortex version / git hash | 2.x |
| Package Type | Binary |
@kx499 it would have been helpful if you could elaborate and describe the feature request. Now, trying to read your mind, I'd say that instead of having analyzer templates on TheHive's side, you would prefer to have them supplied by Cortex, using for example a caching mechanism to avoid cluttering the output every time a given analyzer is triggered. That way, not only TheHive but any tool that would be interfaced with Cortex can interpret the JSON output using the templates.