TheHive-Project / TheHive-Project/Cortex-Analyzers
How do I load the responders into the Cortex UI?
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 490
- Forks
- 405
- Avg merge
- 2d 43m
- Merged PRs (30d)
- 8
Description
Request Type
How do I load the responders into the Cortex UI.
HowTo/Responders
Work Environment
Dev/Testing
VMWare Workstation Pro 16.x
All-in-One installation
No docker
Responders are located in the default location, so they are present on the server:
/opt/Cortex-Analyzers/responders
Config file:
| Question | Answer |
|---|---|
| OS version (server) | Ubuntu 20.04 |
| OS version (client) | Win11 |
| Cortex Responder Name | AMPforEndpoints, FalconCustomIOC |
| Cortex Responder Version | not sure how to determine this. I just installed Cortex. |
| Cortex Version | 3.1.7 |
| Browser type & version | Google Chrome, Version 108.0.5359.125 (Official Build) (64-bit) |
Description
I see the Analyzers in the UI.
I was able to update and install all the dependencies.
How do I enable the responders?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the responder location /opt/Cortex-Analyzers/responders and the configuration shown in the issue, using the reported Cortex 3.1.7 environment. Clarify the documented steps for enabling responders, with completion shown by AMPforEndpoints and FalconCustomIOC appearing in the Cortex UI.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python, ubuntu
- Domain
- documentation, security
- Issue type
- Documentation
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100