#1 most frequent
United States of America
43.8%70 installations of 160
What is TheHive?
TheHive is an open source and free cybersecurity incident response platform.
Categories & Use Cases
Media
1 / 8
Screenshot of Alert Management: Go through your dedicated and detailed Alert page, make comments, identify similar Alerts, define custom statuses and fields. Then decide whether or not they should be escalated to investigations or to incident response.
Top Performing Features
Company-wide Incident Reporting
Built-in enterprise-level ticketing system to leverage the knowledge of the entire workforce, not just the security team
Category average: 8.8
Integration with Other Security Systems
Pre-built integration with other security systems like SIEM and threat intelligence
Category average: 7.5
Centralized Dashboard
A central dashboard provides analysts with a clear look at the most important data
Category average: 8.5
Areas for Improvement
Live Response for Rapid Remediation
Live remediation response allows incident responders to initiate remediation from anywhere over secure connection
Category average: 8.3
Who Buys & Uses TheHive
#2 most frequent
France
19.4%31 installations of 160
#3 most frequent
Spain
6.9%11 installations of 160
TheHive--it works
Use Cases and Deployment Scope
TheHive is our incident response platform, as a small team it allows us to automate a lot of the tasks we need to perform. The design also allows us to set up templates which sign to our response plans. We use it on every Cyber Security incident we deal with in the University, and ties into a number of our third party service providers (in some cases, we have gone with a service provider as we know there was easy integration with TheHive).
Pros
- Templates for cases, ensuring standard processes
- Integration with third parties, to provide a single screen for incident response
- Customisation, so that what we see reflects the way we work
Cons
- Analysers and responders might need more more documentation to help us understand them
Most Important Features
- Integration with other service providers
- Standardised templates
- Automation
Return on Investment
- Reduced time to analyse and respond to incidents
