Bring TheHive into
the flow of work.
A little less busywork with TheHive.
Gather contextDo the workReview & share
Log4 capabilities+
- Get many logsRead
Get many task logs
- Get a logRead
Get a single log
- Create a logWrite
Create task log
- Execute a responder
Execute a responder on a selected log
Update events16 capabilities+
- *Event
- Alert CreatedEvent
- Alert DeletedEvent
- Alert UpdatedEvent
- Case CreatedEvent
- Case DeletedEvent
- Case UpdatedEvent
- Log CreatedEvent
- Log DeletedEvent
- Log UpdatedEvent
- Observable CreatedEvent
- Observable DeletedEvent
- Observable UpdatedEvent
- Task CreatedEvent
- Task DeletedEvent
- Task UpdatedEvent
Frequently asked
questions.
What could an Ambacti integration do with TheHive?
The documented operations include Log: Get many logs; Log: Get a log; Log: Create a log; Log: Execute a responder.
Could I keep a workflow read-only?
For a read-only workflow, limit account permissions to reading data and exclude actions that create, update, or delete records.
Will every action run automatically?
Choose which steps could run on their own and which should pause for review. Changes should follow the permissions and approval rules you set.
Do I need to review actions in TheHive?
Decide which work could run on its own and which steps need your review.