(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-WRBNM36X'); (function(ss,ex){ window.ldfdr=window.ldfdr||function(){(ldfdr._q=ldfdr._q||[]).push([].slice.call(arguments));}; (function(d,s){ fs=d.getElementsByTagName(s)[0]; function ce(src){ var cs=d.createElement(s); cs.src=src; cs.async=1; fs.parentNode.insertBefore(cs,fs); }; ce('https://sc.lfeeder.com/lftracker_v1_'+ss+(ex?'_'+ex:'')+'.js'); })(document,'script'); })('bElvO7322MM8ZMqj');
EN
Français English
Request a demo
EN
Français English
Products
Pricing
Company
Resources
Events
Request a demo

Welcome to the StrangeBee Blog!

Our latest insights about TheHive and incident response

Announcement
Announcement

TheHive MCP is now generally available!

After months of testing and hardening, TheHive MCP is finally ready to leave beta! Here's what we changed and tested, to ensure you are able to use it confidently, on your own data.

Martin Bridenne

Jul 15, 2026

4 min. read
What is DFIR? How a police investigation explains modern incident response
Thought
Food for thought

What is DFIR? How a police investigation explains modern incident response

Broken windows, suspicious IPs and cold cases: a phase-by-phase guide to the DFIR lifecycle through the lens of detective work

Jun 29, 2026

7 min. read
Security incident prioritization: proven methods to improve alert triage
Thought
Food for thought

Security incident prioritization: proven methods to improve alert triage

Not every alert deserves the same urgency. Here's how SOC, CERT, CSIRT and MSSP teams can prioritize threats with context and confidence.

Apr 30, 2026

7 min. read
TheHive 5.7: ready when you are!
Announcement
Announcement

TheHive 5.7: ready when you are!

Introducing the support of OAuth2 in Alert Feeder, case-insensitive observable types, MFA enforcement and bulk response on observables.

Apr 13, 2026

7 min. read

Articles

All Announcement Food for thought Hands-on Interactive No Category Q&A Statement Success Story Webinar
TheHive MCP Server webinar replay
Hands-on
Hands-on

TheHive MCP Server in action: See how to fit AI into real incident response workflows

The webinar recording is now available!

Ekaterina Makhinova - StrangeBee blog author
Ekaterina Makhinova

Mar 23, 2026

2 min. read
Announcement
Announcement

Introducing TheHive MCP Server, a modern bridge between SOC workflows and LLMs

Empower case management, investigations and response in TheHive through AI capabilities!

Maëlle-Morgane Cartron, Product Marketing Manager at StrangeBee
Maëlle-Morgane Cartron

Jan 29, 2026

7 min. read
TheHive 5.6 release
Announcement
Announcement

Meet TheHive 5.6: collaboration, clarity and control—refined

Introducing TheHive Portal, Global Search, Shared Views and smarter filters

Maëlle-Morgane Cartron, Product Marketing Manager at StrangeBee
Maëlle-Morgane Cartron

Feb 03, 2026

7 min. read
StrangeBee Academy TheHive
Announcement
Announcement

Introducing StrangeBee Academy: the learning hub for TheHive

Learn how to use TheHive in our new centralized hub for structured and interactive learning!

Martin Bridenne

Jan 28, 2026

5 min. read
TheHive case templates InterCERT France
Announcement
Announcement

Meet 18 new case templates based on InterCERT France guidance

Create clear, actionable playbooks for today’s most frequent attack types

Lucas Burté

Dec 05, 2025

5 min. read
Announcement
Announcement

Release of Cortex 4.0: ready for Elasticsearch 8

We are pleased to announce the release of Cortex 4, with support of Elasticsearch 8!

Martin Bridenne

Nov 25, 2025

2 min. read
Announcement
Announcement

Introducing TheHive4Go: the official Go client for TheHive!

We are pleased to announce the release of TheHive4Go, an API client for TheHive written in Go.

Martin Bridenne

Nov 03, 2025

3 min. read
StrangeBee webinar with ONYPHE & Breizh Cyber
Hands-on
Hands-on

Inside a regional CSIRT: how Breizh Cyber scales incident response with TheHive & ONYPHE

Step behind the scenes of the CSIRT of Brittany in this special webinar replay

Ekaterina Makhinova - StrangeBee blog author
Ekaterina Makhinova

Oct 27, 2025

1 min. read
Cyber Incident Response Management (CIRM), a new Gartner category for evolving needs
Thought
Food for thought

Cyber Incident Response Management (CIRM): a new Gartner category for evolving needs

What the new software category means for incident response teams

Ekaterina Makhinova - StrangeBee blog author
Ekaterina Makhinova

Oct 22, 2025

5 min. read
Alert Feeder feature TheHive
Hands-on
Hands-on

Schedule pulling alerts with Alert Feeder in TheHive

Set up active alert ingestion even from sources that can’t push data natively

Maëlle-Morgane Cartron, Product Marketing Manager at StrangeBee
Maëlle-Morgane Cartron

Oct 17, 2025

2 min. read

Blog categories

All Announcement Food for thought Hands-on Interactive Q&A Statement Webinar

Authors

Nabil Adouani, CEO of StrangeBee
Nabil Adouani

CEO
Jerome
Jérôme Léonard

COO
Beatrice Joucreau - StrangeBee blog author
Béatrice Joucreau

Security Officer
StrangeBee Blog author - Fabien Bloume
Fabien Bloume

Security Engineer
Ekaterina Makhinova - StrangeBee blog author
Ekaterina Makhinova

Content Manager
Alexandre Gohier - StrangeBee blog author
Alexandre Gohier

Cloud Engineer
Subscribe to
our newsletter
_stq = window._stq || []; _stq.push([ "view", {"v":"ext","blog":"234289117","post":"4727","tz":"0","srv":"strangebee.com","hp":"atomic","ac":"2","amp":"0","j":"1:16.1-beta.3"} ]); _stq.push([ "clickTrackerInit", "234289117", "4727" ]); //# sourceURL=jetpack-stats-js-before