The following repository is used by TheHive Project to develop and store Cortex analyzers.
Analyzers can be written in any programming language supported by Linux such as Python, Ruby, Perl, etc. Refer to the How to Write and Submit an Analyzer page for details on how to write and submit one.
To configure analyzers, please read the Cortex Analyzer Requirements Guide.
Unless specified otherwise, analyzers are released under the AGPL (Affero General Public License).
If an analyzer is released by its author under a different license, the subfolder corresponding to it will contain a LICENSE file.
Information, news and updates are regularly posted on TheHive Project Twitter account and on the blog.
We welcome your contributions for new analyzers that can take away the load off overworked fellow analysts or improvements to existing ones. Please feel free to fork the code, play with it, make some patches and send us pull requests using issues.
Important: To make it easy for every one, please send one pull request per analyzer. It will help us reviewing the code, and merging as soon as feasible.
We do have a Code of conduct. Make sure to check it out before contributing.
if you encounter an issue with an analyzer or would like to request a new one or an improvement to an existing analyzer, please open an issue on the analyzers' dedicated GitHub repository.
Alternatively, if you need to contact the project team, send an email to [email protected].
We have set up a Google forum at https://groups.google.com/a/thehive-project.org/d/forum/users. To request access, you need a Google account. You may create one using a Gmail address or without one.