Skip to content
NEWMarketplace and the trig8n Agent: sell what you build, and get plans and changes that are tested before you see them. See what is new

Library / Security & Compliance

Security & Compliance

Turn Emails into TheHive Cases Analyzed with Cortex

When a new email arrives over IMAP, it creates a TheHive case, adds observables, runs Cortex analyzers, and updates the case with the findings.

The steps

  1. IMAP Email
  2. TheHive
  3. Create Case
  4. Case
  5. Observable
  6. Analyzer Email
  7. Cortex
  8. IF
  9. Update Case Domain
  10. Update Case Email
  11. Update Case Ip
  12. Wait
  13. Email Reputation
  14. OTX IP

15 steps in total.

Similar automations