Library / Security & Compliance
Security & Compliance
Turn Emails into TheHive Cases Analyzed with Cortex
When a new email arrives over IMAP, it creates a TheHive case, adds observables, runs Cortex analyzers, and updates the case with the findings.
The steps
- IMAP Email
- TheHive
- Create Case
- Case
- Observable
- Analyzer Email
- Cortex
- IF
- Update Case Domain
- Update Case Email
- Update Case Ip
- Wait
- Email Reputation
- OTX IP
15 steps in total.
Similar automations