TheHive-Project / TheHive-Project/Cortex

Create an Analyzer Store

Open
#8 0 comments 4 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

feature request
Dominant language
Scala
Stars
1.6k
Forks
264
PR merge metrics
No merged PRs in 30d

Description

Request Type

Feature Request

Work Environment

N/A

Problem Description

Cortex as of 1.x doesn't have a (simple) process for:

  1. Getting notifications when a new version of an existing analyzer is available or a new analyzer has been published
  2. Updating existing public analyzers to the latest versions (or select a specific version and lock updating)
  3. Installing new public analyzers

Moreover, Cortex does not currently allow teams to:

  1. Add analyzers from private sources
  2. Package analyzers in a simple way and share them easily with public or private communities (without having to use pull requests for public analyzers)
  3. Specify the license of their contributed analyzers and monetize them if they want to
Possible Solutions

Create an analyzer store much like a mobile app store that allow teams to:

  1. Browse through the existing analyzers, see their license, author(s), report samples, required input...
  2. Subscribe to different sources (public, private communities) of analyzers to install them, get notifications about new versions, and lock their update process to stay at a given version if they so please
  3. Install analyzers and configure them on-the-fly without having to restart Cortex
  4. Package and push new analyzers choosing where to share them (public, single or multiple private communities)
  5. Buy analyzers
  6. Obtain support when applicable

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue describes a broad analyzer-store feature but names no files, tests, or entry points. Begin by locating Cortex's analyzer installation, configuration, and API components, then determine how browsing, versioning, private sources, packaging, licensing, payments, and runtime installation should fit together. Done means an agreed design and an implemented store workflow covering the requested capabilities.

Written by the indexing model from the issue text.

Assessment

Tech stack
scala
Domain
api, backend
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.