Skip to content

DOC-272 #232

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/includes/license-user-accounts.md
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
!!! info "License"
The number of user accounts you can create depends on your TheHive license. Only unlocked user accounts of type normal count toward the license limit. User accounts of type service and those with unlicensed permissions aren't limited.
The number of user accounts you can create depends on your TheHive license. Only unlocked user accounts of type Normal count toward the license limit. User accounts of type Service and those with unlicensed permissions aren't limited.
4 changes: 2 additions & 2 deletions docs/thehive/administration/cortex/about-cortex.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@

This topic explains what Cortex is and the benefits of using it with TheHive.

!!! info "Not connected by default"
!!! note "Not connected by default"
By default, TheHive isn't connected to any Cortex server.

!!! info "Cortex support"
Expand Down Expand Up @@ -32,7 +32,7 @@ Cortex offers the following features:
Establishing a connection with Cortex requires an existing account and a valid API key on a Cortex server.

!!! info "Support for multiple Cortex instances"
TheHive supports connecting to one or more Cortex instances simultaneously.
TheHive supports connecting to one or more Cortex instances simultaneously. Connecting to multiple instances requires a paid license.

[Connect TheHive to Cortex](add-a-cortex-server.md) to gather intelligence on observables with analyzers and automate actions using responders:

Expand Down
5 changes: 4 additions & 1 deletion docs/thehive/administration/cortex/add-a-cortex-server.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,12 @@

This topic provides step-by-step instructions for adding a [Cortex](about-cortex.md) server in TheHive.

!!! info "Requirements"
!!! warning "Requirements"
Before adding a Cortex server, you must install and configure Cortex. For instructions, refer to the [Installation and Configuration Guides](../../../cortex/installation-and-configuration/index.md).

!!! note "Multiple Cortex servers"
TheHive supports connecting multiple Cortex servers only with a paid license.

!!! info "Cortex support"
<!-- md:version 5.5 --> Cortex 3.1.5 and earlier are no longer supported since version 5.5.

Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
# About Email Intake Connectors

<!-- md:license Gold --> <!-- md:license Platinum -->

This topic explains what email intake connectors are in TheHive.

Organizations that receive alert data by email can use email intake connectors to automate the creation of alerts in TheHive.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
# How to Connect a Mailbox

<!-- md:license Gold --> <!-- md:license Platinum -->

This topic provides step-by-step instructions for connecting a [mailbox](about-email-intake-connectors.md) in TheHive.

Use this procedure if your organization receives alerts via email and you want to automatically convert them into alerts within TheHive.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
# How to Delete a Mailbox Connection

<!-- md:license Gold --> <!-- md:license Platinum -->

This topic provides step-by-step instructions for deleting a [mailbox connection](about-email-intake-connectors.md) in TheHive.

{!includes/administrator-access-manage-email-intake-connectors.md!}
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
# How to Manually Trigger Email Fetch in a Mailbox

<!-- md:license Gold --> <!-- md:license Platinum -->

This topic provides step-by-step instructions for manually triggering email fetch in a [mailbox](about-email-intake-connectors.md) in TheHive.

Use this procedure to manually fetch emails before the next scheduled refresh.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,9 @@ TheHive integrates with MISP in several ways:
* [Manual import of MISP events into TheHive as cases](../../user-guides/analyst-corner/cases/create-a-new-case.md#create-a-case-from-a-misp-event)
* [Manual export of cases to MISP as events](../../user-guides/analyst-corner/cases/export-a-case-to-misp.md) for sharing observables marked as IOCs with the community

!!! note "Multiple MISP servers"
TheHive supports connecting multiple MISP servers only with a paid license.

## Permissions

{!includes/administrator-access-manage-misp-servers.md!}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,9 @@ To manually import a MISP event as a case in TheHive, refer to [How to Create a
!!! info "Requirements"
Before proceeding with these instructions, ensure you have [a MISP API key](https://www.circl.lu/doc/misp/automation/#automation-api). You can find the API key under the **My Profile** page (/users/view/me) on your MISP instance.

!!! note "Multiple MISP servers"
TheHive supports connecting multiple MISP servers only with a paid license.

{!includes/upgrade-misp.md!}

{!includes/administrator-access-manage-misp-servers.md!}
Expand Down
2 changes: 2 additions & 0 deletions docs/thehive/administration/status/create-a-status.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
# How to Create a Status

<!-- md:license Gold --> <!-- md:license Platinum -->

This topic provides step-by-step instructions for creating a [status](about-statuses.md) for cases and alerts in TheHive.

Use this procedure to add custom statuses in addition to [the predefined ones managed by TheHive](about-statuses.md#predefined-statuses).
Expand Down
2 changes: 2 additions & 0 deletions docs/thehive/administration/status/delete-a-status.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,7 @@
# How to Delete a Status

<!-- md:license Gold --> <!-- md:license Platinum -->

This topic provides step-by-step instructions for deleting a [status](about-statuses.md) for cases and alerts in TheHive.

!!! info "Deletion conditions"
Expand Down