(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-WRBNM36X');

(function(ss,ex){ window.ldfdr=window.ldfdr||function(){(ldfdr._q=ldfdr._q||[]).push([].slice.call(arguments));}; (function(d,s){ fs=d.getElementsByTagName(s)[0]; function ce(src){ var cs=d.createElement(s); cs.src=src; cs.async=1; fs.parentNode.insertBefore(cs,fs); }; ce('https://sc.lfeeder.com/lftracker_v1_'+ss+(ex?'_'+ex:'')+'.js'); })(document,'script'); })('bElvO7322MM8ZMqj');

EN

EN

See all integrations

Microsoft Sentinel

Microsoft Sentinel is a cloud-native SIEM and SOAR solution that delivers intelligent security analytics and threat intelligence across the enterprise, enabling threat detection, investigation, and automated response at scale

SIEM & Analytics

TheHive Flow Node

1 Function

azure.microsoft.com GitHub

TheHive Flow node

Orchestrate this vendor from TheHive Flow workflows

Manage Microsoft Sentinel incidents and maintain Sentinel watchlists.

Example use cases:

Import Sentinel incidents with their entities as TheHive alerts and observables
Write the TheHive analysis back as a comment on the Sentinel incident
Close the Sentinel incident with the right classification when the case is closed

TheHive Flow is TheHive's native automation and orchestration engine, available exclusively with the TheHive ONE plan.

Function

Automate TheHive actions or ingest alerts

alertfeeder_ingestSentinelIncidents `v1.0.0`

Polls Microsoft Sentinel/Defender alerts from the Microsoft Graph Security API (/security/alerts_v2), groups them by incidentId, and creates one TheHive alert per incident

Author: Fabien Bloume, StrangeBee

CrowdStrike Falcon

Microsoft Defender for Endpoint

Microsoft Entra ID

Google Threat Intelligence

Recorded Future

Microsoft Defender for Office 365

Microsoft Teams

AIL Onion-Lookup

Check Point Harmony Email & Collaboration

CIRCL Hash Lookup

CIRCL Passive DNS

CIRCL Passive SSL

CIRCL Vulnerability-Lookup

Cisco Secure Endpoint (Formerly AMP for Endpoints)

CiscoThreatGrid

CiscoThreatResponse

Cisco Umbrella Investigate

DNSLookingglass

Domain Mail SPF DMARC

DomainTools Iris

EmergingThreats

Forcepoint WebsensePing

Gatewatcher CTI

Google Safe Browsing

Google Vision API

GRR Rapid Response

Have I Been Pwned

Hybrid Analysis

IntezerCommunity

MailIncidentStatus

MalwareClustering

Malware Hash Registry (MHR)

Microsoft Exchange Online

MISP Warning Lists

Mnemonic Passive DNS

MSRiskIQPassiveTotal

ONYPHEActiveScan

Palo Alto AutoFocus

PAN Cortex XSOAR

PAN Next Generation Firewall

PhishingInitiative

Rapid7 InsightConnect

Request Tracker (RT4)

SEKOIA Intelligence Center

ValidateObservable

Back to all integrations

Explore similar integrations

SIEM & Analytics

1 TheHive Flow Node

2 External integrations

SIEM & Analytics

1 TheHive Flow Node

1 External integration

SIEM & Analytics

SIEM & Analytics

See how TheHive can help your team

Thousands of analysts worldwide rely on our platform to manage security incidents more efficiently than ever.
See what the buzz is about: