We recently hosted a dedicated webinar on TheHive MCP Server—the bridge between TheHive and the AI tools your team already uses.
If you missed it, no worries—below, you’ll find the full recording, accessible to everyone.
Hands-on
Webinar
TheHive MCP Server in action: See how to fit AI into real incident response workflows
Ekaterina Makhinova
Content Manager
MCP stands for Model Context Protocol. TheHive MCP Server gives LLMs direct access to your TheHive environment. In practice, this means an AI assistant can interact with your cases, create and update observables, generate activity summaries and run analyzers, all through natural language, via controlled MCP actions. And if you self-host both your LLM and TheHive MCP, your sensitive security data never leaves your infrastructure.
Read our dedicated article to learn more about what TheHive MCP Server is!
What's inside this webinar
StrangeBee experts—Florian Perret (Head of Solutions), Jean Collette (AI Engineer) and Maëlle-Morgane Cartron (Product Marketing Manager)—walked through the key concepts and a live setup demo in a focused session, followed by a live Q&A with the audience.
Watch the replay to learn:
- What TheHive MCP Server is and how it bridges AI capabilities with SOC operational workflows
- How to get it up and running and integrate it into existing incident response processes
- How analysts can use natural language to perform actions across cases, generate playbooks, run analyzers and get instant security analytics—without scripts or API calls
Watch the full recording of TheHive MCP Server webinar
Share it
About author
Ekaterina Makhinova
Content Manager
