# StrangeBee: Empowering incident responders worldwide > StrangeBee empowers SOCs, CERTs \& CSIRTs worldwide with TheHive, the trusted Cybersecurity Incident Response Management \(CIRM\) platform\. This llms\.txt file is meant for consumption by LLMs\. Generated by Amprise Design for "strangebee\.com"\. ## Pages - [Contact StrangeBee](https://strangebee.com/contact-us/): Contact StrangeBee—we’re here to help\! Book a TheHive demo, talk pricing, request a free Community license or just send us your question\. - [fr] [Contacter StrangeBee](https://strangebee.com/fr/nous-contacter/): Contactez StrangeBee : démo de TheHive, question tarifaire, licence Community ou simple curiosité ? Choisissez votre option ou écrivez\-nous \! - [StrangeBee](https://strangebee.com/): StrangeBee empowers SOCs, CERTs \& CSIRTs worldwide with TheHive, the trusted Cybersecurity Incident Response Management \(CIRM\) platform\. - [TheHive](https://strangebee.com/thehive/): TheHive is a Cybersecurity Incident Response Management \(CIRM\) platform trusted SOC, CERT, CSIRT and MSSP teams worldwide\. Learn more here\! - [fr] [TheHive](https://strangebee.com/fr/thehive/): TheHive, la plateforme de Cybersecurity Incident Response Management : tout votre cycle d’incident au même endroit\. - [TheHive Cloud Platform \(SaaS\)](https://strangebee.com/thehive-cloud-platform/): TheHive Cloud Platform is the fully managed SaaS version of TheHive, run by StrangeBee in your dedicated AWS environment\. Learn more here\! - [fr] [TheHive Cloud Platform \(SaaS\)](https://strangebee.com/fr/thehive-cloud-platform/): TheHive Cloud Platform : tout TheHive en SaaS, dans votre environnement AWS dédié\. StrangeBee gère l’infra, vous gérez les incidents\. - [TheHive Community Edition](https://strangebee.com/thehive-community-edition/): TheHive Community Edition puts real incident response tools in the hands of students, researchers and home labbers\. See how\! - [fr] [TheHive Community Edition](https://strangebee.com/fr/thehive-community-edition/): TheHive Community Edition : faites vos armes en réponse à incidents, gratuitement\. Auto\-hébergé, 2 utilisateurs, usage non commercial\. - [TheHive MCP Server](https://strangebee.com/thehive-mcp-server/): Meet TheHive MCP Server: learn how to boost your investigations through connecting any AI assistant to TheHive\! - [TheHive Pricing](https://strangebee.com/thehive-pricing/): TheHive's pricing depends on how many users and organizations you need to support\. Request a custom pricing discussion on this page\! - [fr] [Forfaits \& tarifs de TheHive](https://strangebee.com/fr/thehive-forfaits-tarifs/): Tarifs TheHive : un prix selon vos utilisateurs et organisations\. Parlons\-en : demandez un échange personnalisé \! - [TheHive integrations](https://strangebee.com/thehive-integrations/): TheHive Integrations portal: discover everything you can connect our platform to for your investigations and incident response\! - [Alert triage](https://strangebee.com/thehive-alert-triage/) - [IR automation](https://strangebee.com/thehive-incident-response-automation/) - [Case management](https://strangebee.com/thehive-case-management-platform/) - [Case management \(request a demo\)](https://strangebee.com/case-management-thehive-request-demo/) - [Case management \(request pricing\)](https://strangebee.com/case-management-thehive-request-pricing/) - [StrangeBee Academy](https://strangebee.com/academy/): Explore StrangeBee Academy: learn how to get the most out of TheHive with courses developed and delivered by its own creators\! - [Subscription to newsletters](https://strangebee.com/subscribe-to-newsletter/) - [TheHive for MSSPs](https://strangebee.com/thehive-for-mssp/): Discover how TheHive can help MSSPs boost workflows and scale operations through centralization, visibility, collaboration and more\! - [TheHive features](https://strangebee.com/thehive-features/): Discover the core features of TheHive to get the most out of it and boost your security case management and incident response\! - [Events](https://strangebee.com/events/): See all the events we participate in, and come meet our bees at the StrangeBee booth\! - [Success stories](https://strangebee.com/success-stories/) - [fr] [Témoignages clients](https://strangebee.com/fr/temoignages-clients/) - [Blog](https://strangebee.com/blog/): Discover the official StrangeBee blog: Read the latest insights about the cybersecurity world and TheHive\! - [fr] [Blog](https://strangebee.com/fr/articles/): Discover the official StrangeBee blog: Read the latest insights about the cybersecurity world and TheHive\! - [Use cases](https://strangebee.com/use-cases-thehive/): Check our use cases to learn how TheHive assists security teams in responding efficiently to potential threats\. - [Media Kit](https://strangebee.com/media-kit/): Download the official logos of StrangeBee, TheHive and Cortex for your communication needs - [fr] [Kit média StrangeBee](https://strangebee.com/fr/kit-media/): Téléchargez les logos de StrangeBee, TheHive et Cortex dans la meilleure qualité - [TheHive IaaS Azure](https://strangebee.com/thehive-iaas-azure/): TheHive IaaS Azure: get our automated deployment code and always have your cloud images maintained by StrangeBee experts\. - [fr] [TheHive IaaS Azure](https://strangebee.com/fr/thehive-iaas-azure/): TheHive IaaS Azure: obtenez notre code de déploiement automatisé ; vos images cloud sont toujours maintenues par des experts StrangeBee\. - [TheHive IaaS AWS](https://strangebee.com/thehive-iaas-aws/): TheHive IaaS AWS: get our automated deployment code and always have your cloud images maintained by StrangeBee experts\. - [fr] [TheHive IaaS AWS](https://strangebee.com/fr/thehive-iaas-aws/): TheHive IaaS AWS: obtenez notre code de déploiement automatisé ; vos images cloud sont toujours maintenues par des experts StrangeBee\. - [Cortex](https://strangebee.com/cortex/): Discover Cortex—the "brain" engine of TheHive, the world's beloved Cybersecurity Incident Response Management platform\. - [fr] [Cortex](https://strangebee.com/fr/cortex/): Découvrez Cortex, le moteur « cérébral » de TheHive, la plateforme de Cybersecurity Incident Response Management \(CIRM\) de confiance\. - [TheHive demo](https://strangebee.com/thehive-demo/): TheHive demo: learn how our Cybersecurity Incident Response Management platform can elevate your security operations\. Request a demo now\! - [fr] [TheHive démo](https://strangebee.com/fr/thehive-demo/): TheHive démo: découvrez comment notre plateforme de Cybersecurity Incident Response Management \(CIRM\) peut améliorer vos opérations \! - [About StrangeBee](https://strangebee.com/about-strangebee/): Learn more about StrangeBee, the bees behind TheHive—one of the world's leading Cybersecurity Incident Response Management platforms\! - [fr] [À propos de StrangeBee](https://strangebee.com/fr/a-propos-de-strangebee/): Apprenez\-en plus sur les abeilles derrière TheHive, l'une des principales plateformes de case management au monde pour répondre à incidents \! - [Services by StrangeBee](https://strangebee.com/services-by-strangebee/): Learn more about the services provided by StrangeBee\. Get support every step of the way with our Cybersecurity Incident Response Management platform\. - [fr] [Services de StrangeBee](https://strangebee.com/fr/services-de-strangebee/): Services de StrangeBee : apprenez\-en plus \! Bénéficiez d'une assistance à chaque étape d'utilisation de notre plateforme\. - [Careers at StrangeBee](https://strangebee.com/careers-at-strangebee/): Check out the careers at StrangeBee: bee\-come a part of our cybersecurity hive, and let's make the world safer together\! - [fr] [Travailler chez StrangeBee](https://strangebee.com/fr/travailler-chez-strangebee/): Travailler chez StrangeBee : rejoignez notre équipe d'abeilles \! Rendons le monde plus sûr ensemble ? - [Legal information](https://strangebee.com/legal-strangebee/): StrangeBee Legal: read our Privacy Policy, Cookie Policy and Terms of Use, as well as Terms \& Conditions for TheHive \(on\-prem, IaaS, SaaS\)\. - [fr] [Legal information](https://strangebee.com/fr/juridique-strangebee/): StrangeBee Legal: read our Privacy Policy, Cookie Policy and Terms of Use, as well as Terms \& Conditions for TheHive \(on\-prem, IaaS, SaaS\)\. - [Terms \& Conditions—TheHive Cloud Platform Large](https://strangebee.com/terms-thehive-cloud-platform-large/): Check TheHive Cloud Platform Large Terms \& Conditions - [Terms \& Conditions—TheHive Cloud Platform XLarge](https://strangebee.com/terms-thehive-cloud-platform-xlarge/): Check TheHive Cloud Platform XLarge Terms \& Conditions - [Terms \& Conditions—TheHive Cloud Platform Custom](https://strangebee.com/terms-conditions-thehive-cloud-platform-custom/): Terms \& Conditions TheHive Cloud Custom - [Terms of Use](https://strangebee.com/terms-of-use/): Terms of Use \- StrangeBee - [Terms \& Conditions—TheHive Gold](https://strangebee.com/terms-thehive-gold/): Check TheHive Gold Terms \& Conditions - [Terms \& Conditions—TheHive Platinum](https://strangebee.com/terms-thehive-platinum/): Check TheHive Platinum Terms \& Conditions - [Terms \& Conditions—TheHive Community license](https://strangebee.com/terms-conditions-thehive-community-license/): Check TheHive Community License Terms \& Conditions ## Posts - [TheHive 6: orchestration built right into your investigation](https://strangebee.com/blog/thehive-6-release/): TheHive 6 is here: orchestrate your incident response with TheHive Flow and track every automation run in the new Automation Center\. - [fr] [TheHive 6 : l’orchestration au cœur de vos investigations](https://strangebee.com/fr/blog/thehive-6-disponible/): TheHive 6 est là : orchestrez votre réponse à incident avec TheHive Flow et suivez chaque exécution automatisée grâce à l'Automation Center\. - [Meet TheHive Flow: native orchestration for TheHive](https://strangebee.com/blog/thehive-flow-native-orchestration/): TheHive Flow brings low\-code automation to TheHive\. Build workflows for alert triage, enrichment and response, with full visibility\. - [fr] [Découvrez TheHive Flow : l’orchestration native dans TheHive](https://strangebee.com/fr/blog/thehive-flow-orchestration-native/): TheHive Flow intègre l’automatisation à TheHive\. Créez des workflows de triage, d’enrichissement et de réponse, et suivez chaque exécution\. - [Incident response under regulatory pressure: a practical look](https://strangebee.com/blog/cybersecurity-regulations-incident-response/): New rules set tight requirements for incident response\. See what cybersecurity regulations expect from SOC teams, and how to keep up\. - [TheHive 5\.8: right on the clock](https://strangebee.com/blog/thehive-5-8-release-sla-tracking-dashboard-search-api/): TheHive 5\.8 brings native SLA tracking, richer dashboards, an extended Global Search and a reworked API documentation\. - [fr] [TheHive 5\.8 : restez dans les temps \!](https://strangebee.com/fr/blog/thehive-5-8-release-sla-tracking-dashboard-search-api/): TheHive 5\.8 intègre la gestion des SLA, enrichit les dashboards, étend la Global Search et introduit une nouvelle doc API\. - [TheHive MCP is now generally available\!](https://strangebee.com/blog/thehive-mcp-generally-available/): TheHive MCP is now generally available\! Discover what we have done to make it ready to run on your investigation data\. - [fr] [TheHive MCP évolue vers sa version 1\.0](https://strangebee.com/fr/blog/thehive-mcp-version-1-0/): TheHive MCP est officiellement disponible\. Découvrez tout ce que nous avons fait pour le rendre prêt pour vos données de production\. - [What is DFIR? How a police investigation explains modern incident response](https://strangebee.com/blog/what-is-dfir-digital-forensics-incident-response/): What is DFIR? Discover how the incident response lifecycle mirrors a murder investigation, from detecting the first clue to closing the case\. - [Security incident prioritization: proven methods to improve alert triage](https://strangebee.com/blog/security-incident-prioritization-proven-methods-to-improve-alert-triage/): Discover proven methods for incident prioritization that can help you respond to threats with context and confidence\. - [TheHive 5\.7: ready when you are\!](https://strangebee.com/blog/thehive-5-7-release-bulk-responders-mfa-oauth2-observables/): TheHive 5\.7: Integrate more tools via OAuth2, correlate incidents more easily, enforce MFA and run responders on multiple observables at once\. - [fr] [TheHive 5\.7 : moins de friction, plus de contrôle](https://strangebee.com/fr/blog/thehive-5-7-release-bulk-responders-mfa-oauth2-observables/): Ingérez des alertes via OAuth2, corrélez plus efficacement, forcez le MFA et déclenchez des responders sur plusieurs observables à la fois\. - [TheHive MCP Server in action: See how to fit AI into real incident response workflows](https://strangebee.com/blog/thehive-mcp-server-ai-incident-response-webinar/): Watch the replay of our TheHive MCP Server webinar and learn how to unlock new AI capabilities for your SOC team\! - [Cyber Incident Response Management \(CIRM\): a new Gartner category for evolving needs](https://strangebee.com/blog/gartner-cyber-incident-response-management-cirm/): Cyber Incident Response Management \(CIRM\) by Gartner: learn about the new category and what it means for incident responders\. - [Introducing TheHive MCP Server, a modern bridge between SOC workflows and LLMs](https://strangebee.com/blog/thehive-mcp-server-launch/): Meet TheHive MCP: learn how to empower your case management, investigations and response in TheHive through AI capabilities\! - [Introducing StrangeBee Academy: the learning hub for TheHive](https://strangebee.com/blog/strangebee-academy-launch/): Meet StrangeBee Academy, our learning hub designed to help analysts become confident and operational faster on TheHive\! - [fr] [StrangeBee Academy : montez en compétence sur TheHive](https://strangebee.com/fr/blog/strangebee-academy-launch/): Découvrez StrangeBee Academy, notre plateforme d’apprentissage conçue pour aider les analystes à mieux prendre en main TheHive \! - [Meet 18 new case templates based on InterCERT France guidance](https://strangebee.com/fr/blog/thehive-case-templates-intercert-france/): Meet 18 new case templates in TheHive to create clear, actionable playbooks for today’s most frequent attack types\! - [Cortex 4\.0: ready for Elasticsearch 8](https://strangebee.com/blog/cortex-4-0-elasticsearch-8-release/): Cortex 4\.0 is now available, with full support of Elasticsearch 8\. This release upgrades the platform to a secure, maintained stack\. - [Introducing TheHive4Go: the official Go client for TheHive](https://strangebee.com/blog/introducing-thehive4go-client/): Meet TheHive4Go, the official Go client for TheHive’s API\. It supports all public endpoints for integrations and automation\. - [Inside a regional CSIRT: how Breizh Cyber scales incident response with TheHive \& ONYPHE](https://strangebee.com/blog/incident-response-at-breizh-cyber-with-thehive-onyphe/): See the ONYPHE \& TheHive combo in action: step behind the scenes of the CSIRT of Brittany in this special webinar replay\! - [fr] [Comment Breizh Cyber renforce sa réponse à incident avec TheHive et ONYPHE](https://strangebee.com/fr/blog/reponse-a-incident-chez-breizh-cyber-avec-thehive-onyphe/): Dans ce webinaire spécial, voyez comment TheHive et ONYPHE renforcent la réponse à incident du CSIRT de la région Bretagne \! - [Schedule pulling alerts with Alert Feeder in TheHive](https://strangebee.com/blog/alert-feeder-thehive/): Try Alert Feeder in TheHive: set up active alert ingestion even from sources that can’t push data natively\. - [Keep sensitive investigations private with Private Cases in TheHive](https://strangebee.com/blog/private-cases-thehive/): Explore Private Cases in TheHive: watch our interactive video to learn to define who gets to know about, see, open or interact with cases\. - [How MSSPs can scale cybersecurity operations without sacrificing quality](https://strangebee.com/blog/scale-mssp-cybersecurity-operations/): How to scale MSSP security operations without losing visibility or control? Learn what can make workflows more manageable and teams more efficient\. - [See JA4+ in action: Smarter detection, correlation \& enrichment in TheHive](https://strangebee.com/blog/ja4-thehive-webinar-recording-available/): Watch the webinar replay to learn about JA4+ Fingerprinting and how it integrates with TheHive to boost detection, triage and enrichment\! - [fr] [Découvrez JA4+ en action : détection, corrélation et enrichissement renforcés dans TheHive](https://strangebee.com/fr/blog/ja4-thehive-webinaire-replay/): Découvrez comment JA4+ s’intègre à TheHive pour renforcer la détection, l’enrichissement et le triage des incidents\. - [Cybersecurity alert fatigue: what it is and how SOC teams can fight back](https://strangebee.com/blog/what-is-cybersecurity-alert-fatigue-and-how-to-fight-back/): Alert fatigue can slow detection, overwhelm analysts and hide real threats\. Learn how to manage it—with help from TheHive\. - [fr] [Fatigue d’alerte en cybersécurité : comment les équipes SOC peuvent y faire face](https://strangebee.com/fr/blog/fatigue-alertes-cybersecurite-soc/): Découvrez les causes de la fatigue d'alerte, ses effets sur les équipes SOC et comment TheHive peut aider à y remédier\. - [JA4+ Fingerprinting: The new weapon for analysts, now integrated into TheHive](https://strangebee.com/blog/ja4-fingerprinting-now-available-in-thehive/): JA4 has become available in TheHive: discover how to boost encrypted threat detection and further enrich observables and investigations\! - [fr] [JA4+ Fingerprinting : la nouvelle arme des analystes, intégrable dans TheHive](https://strangebee.com/fr/blog/ja4-fingerprinting-integrable-dans-thehive/): Découvrez comment JA4+ Fingerprinting améliore l’analyse du trafic chiffré et renforce la détection et les investigations dans TheHive \! - [thehive4py 2\.0 goes live on August 1st, 2025](https://strangebee.com/blog/thehive4py-2-0-release-on-august-1st-2025/): thehive4py 2\.0 launches in a month: get ready for the official Python library for TheHive, rebuilt for the v1 API and ready for production use\! - [TheHive 5 turns 3: Check out what’s new since bee\-4\!](https://strangebee.com/blog/thehive-5-3-year-anniversary-key-features/): TheHive 5 turns three this year and continues to build on the features that made v3 and v4 so iconic\. Let's have an overview\! - [How to seamlessly migrate your on\-prem TheHive \& Cortex to TheHive Cloud Platform](https://strangebee.com/blog/how-to-migrate-your-thehive-on-prem-to-thehive-cloud-platform/): Looking to migrate your TheHive from on\-prem to the cloud? Learn how we can assist you in upgrading to the SaaS version of our platform\. - [fr] [Comment migrer de manière fluide votre TheHive \& Cortex on\-prem vers TheHive Cloud Platform](https://strangebee.com/fr/blog/comment-migrer-de-manire-fluide-votre-thehive-cortex-on-prem-vers-thehive-cloud-platform/): Vous cherchez à migrer votre TheHive on\-prem vers le cloud ? Découvrez comment nous pouvons vous accompagner dans le passage à la version SaaS de notre plateforme\. - [TheHive 5\.5: taking flight\!](https://strangebee.com/blog/thehive-5-5-release/): Learn what’s new in TheHive 5\.5—the freshest version of our Security Case Management Platform\. Private cases, Alert Feeder and more\! - [fr] [TheHive 5\.5 : cap sur les nouveautés \!](https://strangebee.com/fr/blog/thehive-5-5-cap-sur-les-nouveautes/): Découvrez les nouveautés de TheHive 5\.5, la toute nouvelle version de notre Security Case Management Platform\. Private cases, Alert Feeder et bien plus encore \! - [Cybersecurity trends: evolving threats demand a thoughtful response](https://strangebee.com/blog/cybersecurity-trends-evolving-threats-thoughtful-response/): Key cybersecurity trends and ideas for adapting your cybersecurity team\(s\) to the ever\-changing cyber threat landscape\. - [Migration of Cortex Analyzers and Responders Docker images to GHCR: What it means for you](https://strangebee.com/blog/migration-of-cortex-analyzers-and-responders-docker-images-to-github/): Important hosting change for Cortex Analyzers and Responders effective April 1, 2025: what it means for users - [fr] [Migration des images Docker des Analyzers et Responders Cortex vers GHCR : ce que cela signifie pour vous](https://strangebee.com/fr/blog/migration-des-images-docker-des-analyzers-et-responders-cortex-vers-ghcr-ce-que-cela-signifie-pour-vous/): Important changement d’hébergement pour les Analyzers et Responders Cortex à partir du 1er avril 2025 : ce que cela signifie pour les utilisateurs - [Cortex\-Analyzers 3\.5\.0: Microsoft Entra ID integration, YARA and more\!](https://strangebee.com/blog/cortex-analyzers-3-5-0-microsoft-entra-id-integration-yara-and-more/): Meet this significant Cortex\-Analyzers update packed with useful features and enhancements: our engine has become even more powerful\! - [fr] [Cortex\-Analyzers 3\.5\.0 : Microsoft Entra ID, YARA et plus encore \!](https://strangebee.com/fr/blog/cortex-analyzers-3-5-0-microsoft-entra-id-yara-et-plus-encore/): Découvrez cette importante mise à jour de Cortex\-Analyzers qui regorge de fonctionnalités et d’améliorations utiles : notre moteur est devenu encore plus puissant \! - [SOC 2 Type 2 for TheHive Cloud Platform: mission complete\!](https://strangebee.com/blog/soc-2-type-2-for-thehive-cloud-platform/): The operating effectiveness of the security controls for StrangeBee's SaaS platform has been validated by Deloitte through a SOC 2 Type 2 report\. - [fr] [SOC 2 Type 2 pour TheHive Cloud Platform : mission accomplie \!](https://strangebee.com/fr/blog/soc-2-type-2-pour-thehive-cloud-platform-mission-accomplie/): L’efficacité opérationnelle des contrôles de sécurité pour la plateforme SaaS de StrangeBee a été validée par Deloitte par le biais d’un rapport SOC 2 Type 2\. - [Beyond data: Transforming observables into actionable intelligence](https://strangebee.com/blog/transforming-observables-into-actionable-intelligence/): Learn some tips on how to treat your observables for better data enrichment, elevating incident response and anticipating threats\. - [Meet TheHive 5\.6: collaboration, clarity and control—refined](https://strangebee.com/blog/thehive-5-6-release-portal-search-views-filters/): Learn more about TheHive 5\.6\. Introducing TheHive Portal, Global Search, Shared Views and smarter filters\. - [fr] [Découvrez TheHive 5\.6 : plus de clarté, de collaboration et de contrôle](https://strangebee.com/fr/blog/thehive-5-6-release/): En savoir plus sur TheHive 5\.6 : découvrez TheHive Portal, la recherche globale, les vues partagées et des filtres plus intelligents\. - [Cortex\-Analyzers 3\.4\.0: Unleashing the Falcon](https://strangebee.com/blog/cortex-analyzers-3-4-0-unleashing-the-falcon/): Discover our latest Cortex analyzers and responders, featuring CrowdStrike Falcon integrations for TheHive, supported and maintained by StrangeBee\. - [fr] [Cortex\-Analyzers 3\.4\.0 : Falcon entre en action](https://strangebee.com/fr/blog/cortex-analyzers-3-4-0-falcon-entre-en-action/): Découvrez nos derniers analyzers et responders Cortex, intégrant CrowdStrike Falcon pour TheHive, pris en charge et maintenus par StrangeBee\. - [What’s behind the bee\-autiful new logos of StrangeBee](https://strangebee.com/blog/whats-behind-the-bee-autiful-new-logos-of-strangebee/): Learn how we came up with the new StrangeBee, Cortex and TheHive logos as part of our company's new visual identity\. - [fr] [Ce qui se cache derrière les nouveaux logos bee\-autiful de StrangeBee](https://strangebee.com/fr/blog/ce-qui-se-cache-derrire-les-nouveaux-logos-bee-autiful-de-strangebee/): Découvrez comment nous avons imaginé les nouveaux logos de StrangeBee, Cortex et TheHive — une étape clé dans notre nouvelle identité visuelle\. - [TheHive 5\.4 is out: dark mode, better case reporting and more](https://strangebee.com/blog/thehive-5-4-is-out-dark-mode-better-reporting-and-more/): Stay sharp with a sleek, eye\-friendly interface, faster case reporting and automated tasks\. Save time and make incident response smoother\! - [fr] [TheHive 5\.4 est disponible : mode sombre, case reporting amélioré et bien plus encore](https://strangebee.com/fr/blog/thehive-5-4-est-disponible-mode-sombre-case-reporting-ameliore-et-bien-plus-encore/): Restez affûté avec une interface fluide et agréable à l’œil, un case reporting plus rapide et des tâches automatisées\. Gagnez du temps et facilitez la réponse aux incidents \! - [TheHive 5\.2: “reporting” for duty\!](https://strangebee.com/blog/thehive-5-2-reporting-for-duty/): Presenting TheHive 5\.2: For first\-class incident response, demand nothing less than first\-class incident reports\. - [Security upgrade: Release of TheHive 5\.2\.9 and 5\.1\.10](https://strangebee.com/blog/security-upgrade-release-of-thehive-5-2-9-and-5-1-10/): Meet TheHive versions 5\.2\.9 and 5\.1\.10 with security enhancements after our recent comprehensive penetration testing\. - [TheHive Cloud Platform is now SOC 2 Type 1 compliant](https://strangebee.com/blog/thehive-cloud-platform-is-now-soc-2-type-1-compliant/): TheHive Cloud Platform's SOC 2 Type 1: Deloitte thoroughly audited controls safeguarding customer data and system security - [fr] [TheHive Cloud Platform est désormais conforme à SOC 2 Type 1](https://strangebee.com/fr/blog/thehive-cloud-platform-est-dsormais-conforme-soc-2-type-1/): SOC 2 Type 1 pour TheHive Cloud Platform : Deloitte a audité en profondeur les contrôles protégeant les données clients et la sécurité des systèmes\. - [TheHive 5\.3 is out and buzzing for even more efficiency](https://strangebee.com/blog/thehive-5-3-is-out-and-buzzing-for-even-more-efficiency/): TheHive 5\.3 introduces Email Intake, refined case tracking and a detailed Timeline widget\. It supports OpenSearch and Elasticsearch 8\. - [Email to alert: how TheHive 5\.3 transforms your workflow](https://strangebee.com/blog/email-to-alert-how-thehive-5-3-transforms-your-workflow/): Meet Email Intake in TheHive 5\.3\. Automatically transform emails into alerts to speed up investigations and save time for faster response\. - [Bee\-yond the ordinary: meet StrangeBee’s new visual identity](https://strangebee.com/blog/bee-yond-the-ordinary-meet-strangebees-new-visual-identity/): Learn what's behind the buzz\-worthy new logos and vibrant colors of StrangeBee - [fr] [Une ruche d’originalité : découvrez la nouvelle identité visuelle de StrangeBee](https://strangebee.com/fr/blog/une-ruche-doriginalit-dcouvrez-la-nouvelle-identit-visuelle-de-strangebee/): Découvrez ce qui fait le buzz derrière les nouveaux logos et les couleurs vives de StrangeBee\. - [Efficient alert management: Transforming data overload into actionable intelligence](https://strangebee.com/blog/transforming-data-overload/): Learn how TheHive streamlines cybersecurity alert management, automating triage, reducing false positives and more for faster response\. - [Why using non\-dedicated tools for security incident response is a risky bet](https://strangebee.com/blog/why-using-non-dedicated-tools-for-security-incident-response-is-a-risky-bet/): Learn how purpose\-built platforms like TheHive optimize data tracking, allowing analysts to focus on threats, not inefficient tools\. - [Security case management and incident response—stronger together](https://strangebee.com/blog/security-case-management-and-incident-response-stronger-together/): Learn why security case management is your best friend for incident handling and recovery\. Give cyber threats no power over your systems\. - [Cortex Analyzers 3\.3\.8 release: new tools, fresh upgrades and more\!](https://strangebee.com/blog/cortex-analyzers-3-3-8-release-new-tools-fresh-upgrades-and-more/): Cortex Analyzers 3\.3\.8 is here\! See the full changelog to learn about new tools and updates\! - [fr] [Cortex Analyzers version 3\.3\.8 : nouveaux outils, nouvelles mises à niveau et bien plus encore \!](https://strangebee.com/fr/blog/cortex-analyzers-version-3-3-8-nouveaux-outils-nouvelles-mises-niveau-et-bien-plus-encore/): Cortex Analyzers 3\.3\.8 est disponible \! Consultez le changelog complet pour tout savoir sur les nouveautés et les améliorations\. - [TheHive 5\.1: Elevating cybersecurity incident response](https://strangebee.com/blog/thehive-5-1-release/): For better cybersecurity incident response, your tools should adapt to your environment and processes, not vice versa\. - [TheHive 5\.1: New features](https://strangebee.com/blog/thehive-5-1-new-features/): TheHive 5\.1 has been released\. Let's look at its new features: case template stacking, mandatory tasks and powerful new functions\. - [TheHive 5\.1: Improved features](https://strangebee.com/blog/thehive-5-1-improved-features/): We have improved some of the existing TheHive 5\.1 features that you rely on, making them even more useful\. - [Leveraging TheHive 5 notification capabilities \(pt\. 2\)](https://strangebee.com/blog/leveraging-thehive-5-notification-capabilities-pt-2/): From simple TheHive 5 email notifications to an automated incident response, learn how to leverage the best of this new functionality\! - [Leveraging TheHive 5 notification capabilities \(pt\. 1\)](https://strangebee.com/blog/leveraging-thehive-5-notification-capabilities-pt-1/): Learn how to leverage the best of TheHive 5 notifications, from simple email notifications to automated incident response\! - [TheHive 5\.0 is now available](https://strangebee.com/blog/thehive-5-0-is-now-available/): TheHive 5 further empowers existing users with core incident response enhancements\. - [TheHive 4\.1\.16 is out\!](https://strangebee.com/blog/thehive-4-1-16-is-out/): TheHive 4\.1\.16 has just been released\. It contains an important bug fix along with a few improvements\. - [Cortex Docker containers for your custom Analyzers \& Responders](https://strangebee.com/blog/cortex-docker-containers-for-your-custom-analyzers-responders/): Process your own programs as Docker containers: You need to build your images and catalog and register them in Cortex\. - [New Cortex \& TheHive AMI: improved built\-in operation tools](https://strangebee.com/blog/new-cortex-and-thehive-amis-improved-built-in-operation-tools/): The latest Cortex and TheHive AMI are now available with new features to make the operations side of things even easier\. - [TheHive and Cortex on AWS — AMI tutorials part 3b: Launching TheHive manually with the AWS console](https://strangebee.com/blog/launching-thehive-manually-with-the-aws-console/): This is another article in a series focusing on deploying TheHive and Cortex AMIs on AWS\. We hope these tutorials will be of help to you\! - [Cortex\-Analyzers—release 3\.2](https://strangebee.com/blog/cortex-analyzers-release-3-2/): The 3\.2\.0 release of Cortex\-Analyzers repository is available, with 13 new and updated connectors like CrowdSec, VirusTotal and more\. - [TheHive \& Cortex on AWS — AMI tutorials: Auto\-launching with Terraform](https://strangebee.com/blog/thehive-and-cortex-on-aws-ami-tutorials-auto-launching-with-terraform/): In part 2 of our dedicated tutorials, we will launch TheHive and Cortex instances in our freshly built SecOps VPC using Terraform\. - [TheHive \& Cortex on AWS — AMI tutorials: Deploying a SecOps VPC](https://strangebee.com/blog/thehive-and-cortex-on-aws-ami-tutorials-deploying-a-secops-vpc/): Part 1 of our Cortex \& TheHive AWS tutorials\. Let's look at the reference SecOps VPC architecture used as the target environment\. - [TheHive turns 5 and adopts a model shaped for the future](https://strangebee.com/blog/thehive-turns-5-and-adopts-a-model-shaped-for-the-future/): For its upcoming 5th major release, TheHive will be available under a new distribution model to ensure a sustainable future\. - [FAQ for TheHive 5’s upcoming distribution model](https://strangebee.com/blog/faq-for-thehive-5s-upcoming-distribution-model/): Frequent questions and answers about TheHive 5’s upcoming distribution model\. - [Introducing TheHive Cloud Platform](https://strangebee.com/blog/introducing-thehive-cloud-platform/): Meet TheHive Cloud Platform: rely on the experts building TheHive and Cortex to operate them for you\! - [TheHive and Cortex are now available on AWS Marketplace](https://strangebee.com/blog/thehive-and-cortex-are-now-available-on-aws-marketplace/): With TheHive and Cortex available on AWS Marketplace, it is now easier than ever to deploy and operate them both in the AWS cloud - [Apache Log4j Vulnerability – CVE\-2021\-44228 vs\. TheHive \& Cortex](https://strangebee.com/blog/apache-log4j-vulnerability-cve-2021-44228-vs-thehive-cortex/): TheHive and Cortex are not exposed to the vulnerability affecting Apache Log4j and referenced as CVE\-2021\-44228\. - [How to choose the best security case management platform for your organization](https://strangebee.com/blog/best-security-case-management-platform/): Learn how to pick a security case management platform to investigate alerts, facilitate collaboration and automate incident response\. - [TheHive and Cortex on AWS — AMI tutorials part 3a: Launching Cortex manually with the AWS console](https://strangebee.com/blog/launching-cortex-manually-with-the-aws-console/): In part 3 of the tutorial, we will launch TheHive and Cortex instances in our freshly built SecOps VPC manually using the AWS console\. - [Co\-founders of TheHive Project are officially launching StrangeBee](https://strangebee.com/blog/strangebee-foundation/): TheHive Project is going to fly even further—meet StrangeBee, a unique company founded by three co\-creators of TheHive\! ## Cases - [Phishing](https://strangebee.com/case/phishing/): TheHive eases phishing incident response with automatic email ingestion, extracting key observables like sender details and links\. - [Continuous improvement](https://strangebee.com/case/continuous-improvement/): Learn how TheHive supports continuous improvement by optimizing alert triage, case management and response\. - [Automated DFIR](https://strangebee.com/case/automated-dfir/): TheHive automates DFIR by transforming non\-native alerts, like those from Cortex XDR, into actionable formats using custom Functions\. - [External communication](https://strangebee.com/case/external-communication/): See how TheHive improves external communication and response by automating key processes\. - [Alert triage](https://strangebee.com/case/alert-triage/): TheHive's automated triage optimizes alert management by integrating detection tools using custom JavaScript Functions\. - [Manage your cyber defense](https://strangebee.com/case/manage-your-defense/): TheHive helps better manage your cyber defense with powerful case and observable management tools\. Learn more now\. ## Events - [La Convention](https://strangebee.com/event/concordance-convention/) - [BlackHat Europe 2026](https://strangebee.com/event/blackhat-europe-2026/) - [Concordance Club](https://strangebee.com/event/concordance-club/) - [TheHive MCP](https://strangebee.com/event/thehive-mcp-webinar/) - [INCYBER Europe \(FIC\) 2026](https://strangebee.com/event/incyber-europe-fic-2026/) - [fr] [INCYBER Europe \(FIC\) 2026](https://strangebee.com/fr/event/incyber-europe-fic-2026/) - [BlackHat MEA 2025](https://strangebee.com/event/blackhat-mea-2025/) - [JA4+ in TheHive: smarter detection, correlation \& enrichment for incident response](https://strangebee.com/event/ja4-in-thehive-smarter-detection-correlation-enrichment-for-incident-response/): What is JA4+, and how does it power investigations in TheHive, a real security case management platform? Learn directly from the creator of JA4+\! - [INCYBER Europe \(FIC\) 2025](https://strangebee.com/event/incyber-europe-fic-2025/) - [TheHive x ONYPHE: The winning combo for Brittany’s CSIRT](https://strangebee.com/event/webinar-thehive-onyphe-for-brittany-csirt-operational-cybersecurity/): Watch our first\-ever webinar to step behind the scenes of the CSIRT of the Brittany region \(Breizh Cyber\)\! - [BlackHat Europe 2025](https://strangebee.com/event/blackhat-europe-2025/) - [GRAND IT SECURITY 2025 in Stockholm](https://strangebee.com/event/grand-it-security-2025/) - [Devoxx France](https://strangebee.com/event/devoxx-france-2025/) - [TF\-CSIRT Meeting \& FIRST Regional Symposium Europe](https://strangebee.com/event/tf-csirt-meeting-first-regional-symposium-europe/) - [RSA Conference in San Francisco](https://strangebee.com/event/rsa-conference-in-san-francisco/) ## Product features - [Dashboards \& KPIs](https://strangebee.com/product-feature/thehive-dashboards-kpi/) - [Entity management \(customFields \& statuses\)](https://strangebee.com/product-feature/entity-management-custom-fields-statuses/) - [Case templates](https://strangebee.com/product-feature/case-templates/) - [Report and page templates](https://strangebee.com/product-feature/report-and-page-templates/) - [Cortex analyzers \& responders](https://strangebee.com/product-feature/cortex-analyzers-responders/) - [Notifications \& Functions](https://strangebee.com/product-feature/notifications-functions/) ## Success stories - [How OpenClassrooms builds SOC analyst training around TheHive](https://strangebee.com/success-story/thehive-at-openclassrooms-for-soc-analyst-training/): Learn how TheHive became the heart of the SOC analyst training at a leading European online learning platform\. - [From fragmented alerts to automated incident response: how Mews uses TheHive for hospitality security](https://strangebee.com/success-story/from-fragmented-alerts-to-automated-incident-response-thehive-for-hospitality-security-at-mews/): See how TheHive and Cortex enabled building a self\-service platform to centralize and automate hospitality security operations\! - [How Leiden University boosted incident handling by 50% and simplified security reporting with TheHive](https://strangebee.com/success-story/leiden-university-thehive-incident-handling-security-reporting/): Learn how Leiden University boosted incident handling by 50% and simplified security reporting with TheHive - [How a leading luxury group centralized and automated security alert management with TheHive](https://strangebee.com/success-story/thehive-alert-management-automation-in-luxury-segment/): Learn how our SaaS solution simplified cybersecurity alert management for a multinational luxury group through centralization and automation\! - [Inside Krone’s move to a unified, automation\-driven security workflow with TheHive](https://strangebee.com/success-story/krone-thehive-unified-security-workflow-automation/): Learn how the SOC at Krone managed to bring alerts, context and collaboration in one centralized interface with TheHive - [How the University of St Andrews cut vulnerability management time by 10h a week with TheHive](https://strangebee.com/success-story/how-st-andrews-cut-vulnerability-management-time-with-thehive/): Learn how the University of St Andrews leveraged TheHive’s MISP integration to prioritize CVEs and strengthen cybersecurity\. - [Faster response, smarter reporting: IDEMIA’s story with TheHive](https://strangebee.com/success-story/faster-response-smarter-reporting-idemias-story-with-thehive/): Learn how TheHive has accelerated incident management and elevated visibility for IDEMIA’s international teams - [fr] [Une réponse plus rapide, un reporting plus pertinent : l’histoire de IDEMIA avec TheHive](https://strangebee.com/fr/success-story/idemia-thehive-reponse-a-incidents-reporting/): Découvrez comment TheHive a accéléré la gestion des incidents et amélioré la visibilité des équipes internationales de IDEMIA\. - [Beyond ticketing: How Pipedrive leverages TheHive to improve security workflows](https://strangebee.com/success-story/beyond-ticketing-how-pipedrive-leverages-thehive-to-improve-security-workflows/) - [fr] [Au\-delà de la gestion des tickets : comment Pipedrive s’appuie sur TheHive pour améliorer les workflows de sécurité](https://strangebee.com/fr/success-story/pipedrive-thehive-ameliorer-les-workflows-de-securite/) - [Centralization, automation, freedom: TheHive’s story with a top IT service provider in Germany](https://strangebee.com/success-story/centralization-automation-freedom-thehives-story-with-a-top-it-service-provider-in-germany/) - [fr] [Centralisation, automatisation, liberté : comment TheHive est devenu un pilier chez un grand prestataire IT en Allemagne](https://strangebee.com/fr/success-story/prestataire-it-allemand-thehive-pour-centralisation-automatisation-liberte/) - [How Thales CERT fights typo\-squatting with TheHive](https://strangebee.com/success-story/how-thales-cert-fights-typo-squatting-with-thehive/): Globally distributed teams have specific challenges when it comes to handling typo\-squatted domains\. Learn how Thales does it with TheHive\. - [fr] [Comment les experts CERT de Thales luttent contre le typosquatting en collaborant avec TheHive](https://strangebee.com/fr/success-story/thales-thehive-contre-typo-squatting/): Globally distributed teams have specific challenges when it comes to handling typo\-squatted domains\. Learn how Thales does it with TheHive\. ## Optional - [Sitemap index](https://strangebee.com/sitemap_index.xml)