EN

EN

See all integrations

Elasticsearch

Elasticsearch is a distributed search and analytics engine that powers SIEM solutions and log analysis platforms, enabling analysts to query and correlate security events, logs, and threat data across enterprise infrastructure during incident investigations

SIEM & Analytics

1 Analyzer

1 External integration

www.elastic.co GitHub

Analyzers (1)

Elasticsearch Analysis v1.0

Search for IoCs in Elasticsearch

Author: Nick Prokop
License: MIT
Data Types: url, domain, ip, hash, filename, fqdn, mail, mail-subject, user-agent, hostname, username

External Integrations (1)

External integrations that connect Elasticsearch with TheHive:

TheHive Connector for Kibana

Native Kibana connector that allows Elasticsearch to create alerts and create cases in TheHive

Type: connector

CrowdStrike Falcon

Microsoft Defender for Endpoint

Microsoft Entra ID

Google Threat Intelligence

Recorded Future

Microsoft Defender for Office 365

CERTatPassiveDNS

DNSLookingglass

EmergingThreats

FireHOLBlocklists

Gatewatcher CTI

IntezerCommunity

MailIncidentStatus

MalwareClustering

ONYPHEActiveScan

PhishingInitiative

ValidateObservable

AIL Onion-Lookup

CIRCL Hash Lookup

CIRCL Passive DNS

CIRCL Passive SSL

CIRCL Vulnerability-Lookup

Cisco Secure Endpoint (Formerly AMP for Endpoints)

Domain Mail SPF DMARC

DomainTools Iris

Forcepoint WebsensePing

Google Safe Browsing

Google Vision API

Have I Been Pwned

Hybrid Analysis

Malware Hash Registry (MHR)

MISP Warning Lists

Mnemonic Passive DNS

PAN Cortex XSOAR

PAN Next Generation Firewall

Rapid7 InsightConnect

SEKOIA Intelligence Center

Back to all integrations

Explore similar integrations

SIEM & Analytics

2 External integrations

See how TheHive can help your team

Thousands of analysts worldwide rely on our platform to manage security incidents more efficiently than ever.
See what the buzz is about: