-
Book Overview & Buying
-
Table Of Contents
-
Feedback & Rating

Incident Response with Threat Intelligence
By :

TheHive is a scalable and modular incident management platform that can be installed in a standalone or a cluster distributed environment. Before the installation in a production environment, is very important to define the architecture according to the capacity needs of your organization.
For this module, we will use a preinstalled version of TheHive in a VM to focus specifically on the functionality and capacities of the product. You can consult the project's documentation for installation and configuration at the following link: https://docs.thehive-project.org/thehive/.
The incident management platform is composed of three components:
The architecture of TheHive and Cortex is developed as follows:
...