diff --git a/docs/includes/license-user-accounts.md b/docs/includes/license-user-accounts.md index 938cba42c3..9ff8d1c6ca 100644 --- a/docs/includes/license-user-accounts.md +++ b/docs/includes/license-user-accounts.md @@ -1,2 +1,2 @@ !!! info "License" - The number of user accounts you can create depends on your TheHive license. Only unlocked user accounts of type normal count toward the license limit. User accounts of type service and those with unlicensed permissions aren't limited. \ No newline at end of file + The number of user accounts you can create depends on your TheHive license. Only unlocked user accounts of type Normal count toward the license limit. User accounts of type Service and those with unlicensed permissions aren't limited. \ No newline at end of file diff --git a/docs/thehive/administration/cortex/about-cortex.md b/docs/thehive/administration/cortex/about-cortex.md index 73f1669669..7fc692d013 100644 --- a/docs/thehive/administration/cortex/about-cortex.md +++ b/docs/thehive/administration/cortex/about-cortex.md @@ -4,7 +4,7 @@ This topic explains what Cortex is and the benefits of using it with TheHive. -!!! info "Not connected by default" +!!! note "Not connected by default" By default, TheHive isn't connected to any Cortex server. !!! info "Cortex support" @@ -32,7 +32,7 @@ Cortex offers the following features: Establishing a connection with Cortex requires an existing account and a valid API key on a Cortex server. !!! info "Support for multiple Cortex instances" - TheHive supports connecting to one or more Cortex instances simultaneously. + TheHive supports connecting to one or more Cortex instances simultaneously. Connecting to multiple instances requires a paid license. [Connect TheHive to Cortex](add-a-cortex-server.md) to gather intelligence on observables with analyzers and automate actions using responders: diff --git a/docs/thehive/administration/cortex/add-a-cortex-server.md b/docs/thehive/administration/cortex/add-a-cortex-server.md index 9ae9864e47..7be6a937e1 100644 --- a/docs/thehive/administration/cortex/add-a-cortex-server.md +++ b/docs/thehive/administration/cortex/add-a-cortex-server.md @@ -2,9 +2,12 @@ This topic provides step-by-step instructions for adding a [Cortex](about-cortex.md) server in TheHive. -!!! info "Requirements" +!!! warning "Requirements" Before adding a Cortex server, you must install and configure Cortex. For instructions, refer to the [Installation and Configuration Guides](../../../cortex/installation-and-configuration/index.md). +!!! note "Multiple Cortex servers" + TheHive supports connecting multiple Cortex servers only with a paid license. + !!! info "Cortex support" Cortex 3.1.5 and earlier are no longer supported since version 5.5. diff --git a/docs/thehive/administration/email-intake-connector/about-email-intake-connectors.md b/docs/thehive/administration/email-intake-connector/about-email-intake-connectors.md index 0756597b46..f9cfabf5f5 100644 --- a/docs/thehive/administration/email-intake-connector/about-email-intake-connectors.md +++ b/docs/thehive/administration/email-intake-connector/about-email-intake-connectors.md @@ -1,5 +1,7 @@ # About Email Intake Connectors + + This topic explains what email intake connectors are in TheHive. Organizations that receive alert data by email can use email intake connectors to automate the creation of alerts in TheHive. diff --git a/docs/thehive/administration/email-intake-connector/connect-a-mailbox.md b/docs/thehive/administration/email-intake-connector/connect-a-mailbox.md index 395fed03b4..59bdce67b2 100644 --- a/docs/thehive/administration/email-intake-connector/connect-a-mailbox.md +++ b/docs/thehive/administration/email-intake-connector/connect-a-mailbox.md @@ -1,5 +1,7 @@ # How to Connect a Mailbox + + This topic provides step-by-step instructions for connecting a [mailbox](about-email-intake-connectors.md) in TheHive. Use this procedure if your organization receives alerts via email and you want to automatically convert them into alerts within TheHive. diff --git a/docs/thehive/administration/email-intake-connector/delete-a-mailbox-connection.md b/docs/thehive/administration/email-intake-connector/delete-a-mailbox-connection.md index e706839216..0c09c160cb 100644 --- a/docs/thehive/administration/email-intake-connector/delete-a-mailbox-connection.md +++ b/docs/thehive/administration/email-intake-connector/delete-a-mailbox-connection.md @@ -1,5 +1,7 @@ # How to Delete a Mailbox Connection + + This topic provides step-by-step instructions for deleting a [mailbox connection](about-email-intake-connectors.md) in TheHive. {!includes/administrator-access-manage-email-intake-connectors.md!} diff --git a/docs/thehive/administration/email-intake-connector/fetch-emails.md b/docs/thehive/administration/email-intake-connector/fetch-emails.md index 3d924304f7..926a6a9da1 100644 --- a/docs/thehive/administration/email-intake-connector/fetch-emails.md +++ b/docs/thehive/administration/email-intake-connector/fetch-emails.md @@ -1,5 +1,7 @@ # How to Manually Trigger Email Fetch in a Mailbox + + This topic provides step-by-step instructions for manually triggering email fetch in a [mailbox](about-email-intake-connectors.md) in TheHive. Use this procedure to manually fetch emails before the next scheduled refresh. diff --git a/docs/thehive/administration/misp-integration/about-misp-integration.md b/docs/thehive/administration/misp-integration/about-misp-integration.md index 6db633ea13..393e2132f0 100644 --- a/docs/thehive/administration/misp-integration/about-misp-integration.md +++ b/docs/thehive/administration/misp-integration/about-misp-integration.md @@ -19,6 +19,9 @@ TheHive integrates with MISP in several ways: * [Manual import of MISP events into TheHive as cases](../../user-guides/analyst-corner/cases/create-a-new-case.md#create-a-case-from-a-misp-event) * [Manual export of cases to MISP as events](../../user-guides/analyst-corner/cases/export-a-case-to-misp.md) for sharing observables marked as IOCs with the community +!!! note "Multiple MISP servers" + TheHive supports connecting multiple MISP servers only with a paid license. + ## Permissions {!includes/administrator-access-manage-misp-servers.md!} diff --git a/docs/thehive/administration/misp-integration/connect-a-misp-server.md b/docs/thehive/administration/misp-integration/connect-a-misp-server.md index 052bc25b92..eda6f410ff 100644 --- a/docs/thehive/administration/misp-integration/connect-a-misp-server.md +++ b/docs/thehive/administration/misp-integration/connect-a-misp-server.md @@ -13,6 +13,9 @@ To manually import a MISP event as a case in TheHive, refer to [How to Create a !!! info "Requirements" Before proceeding with these instructions, ensure you have [a MISP API key](https://www.circl.lu/doc/misp/automation/#automation-api). You can find the API key under the **My Profile** page (/users/view/me) on your MISP instance. +!!! note "Multiple MISP servers" + TheHive supports connecting multiple MISP servers only with a paid license. + {!includes/upgrade-misp.md!} {!includes/administrator-access-manage-misp-servers.md!} diff --git a/docs/thehive/administration/status/create-a-status.md b/docs/thehive/administration/status/create-a-status.md index 21d38a48a3..aa434b8560 100644 --- a/docs/thehive/administration/status/create-a-status.md +++ b/docs/thehive/administration/status/create-a-status.md @@ -1,5 +1,7 @@ # How to Create a Status + + This topic provides step-by-step instructions for creating a [status](about-statuses.md) for cases and alerts in TheHive. Use this procedure to add custom statuses in addition to [the predefined ones managed by TheHive](about-statuses.md#predefined-statuses). diff --git a/docs/thehive/administration/status/delete-a-status.md b/docs/thehive/administration/status/delete-a-status.md index f065f6c42c..a470989e1b 100644 --- a/docs/thehive/administration/status/delete-a-status.md +++ b/docs/thehive/administration/status/delete-a-status.md @@ -1,5 +1,7 @@ # How to Delete a Status + + This topic provides step-by-step instructions for deleting a [status](about-statuses.md) for cases and alerts in TheHive. !!! info "Deletion conditions"