A guide to incident response playbooks
Learn the importance of incident response playbooks, how they enhance incident management, and automate your playbook with n8n workflow templates in this comprehensive article.
Back to Integrations 
TheHive and Cortex integration
Save yourself the work of writing custom integrations for TheHive and Cortex and use n8n instead. Build adaptable and scalable Development, and Analytics workflows that work with your technology stack. All within a building experience you will love.
How to connect TheHive and Cortex
- Step 1: Create a new workflow
- Step 2: Add and configure nodes
- Step 3: Connect
- Step 4: Customize and extend your integration
- Step 5: Test and activate your workflow
Step 1: Create a new workflow and add the first step
In n8n, click the "Add workflow" button in the Workflows tab to create a new workflow. Add the starting point – a trigger on when your workflow should run: an app event, a schedule, a webhook call, another workflow, an AI chat, or a manual trigger. Sometimes, the HTTP Request node might already serve as your starting point.
Step 2: Add and configure TheHive and Cortex nodes
You can find TheHive and Cortex in the nodes panel. Drag them onto your workflow canvas, selecting their actions. Click each node, choose a credential, and authenticate to grant n8n access. Configure TheHive and Cortex nodes one by one: input data on the left, parameters in the middle, and output data on the right.
Step 3: Connect TheHive and Cortex
A connection establishes a link between TheHive and Cortex (or vice versa) to route data through the workflow. Data flows from the output of one node to the input of another. You can have single or multiple connections for each node.
Step 4: Customize and extend your TheHive and Cortex integration
Use n8n's core nodes such as If, Split Out, Merge, and others to transform and manipulate data. Write custom JavaScript or Python in the Code node and run it as a step in your workflow. Connect TheHive and Cortex with any of n8n’s 1000+ integrations, and incorporate advanced AI logic into your workflows.
Step 5: Test and activate your TheHive and Cortex workflow
Save and run the workflow to see if everything works as expected. Based on your configuration, data should flow from TheHive to Cortex or vice versa. Easily debug your workflow: you can check past executions to isolate and fix the mistake. Once you've tested everything, make sure to save your workflow and activate it.
Analyze emails with S1EM
With workflow, you analyze Email with TheHive/Cortex
https://github.com/V1D1AN/S1EM/wiki/Soar-guide
Nodes used in this workflow
Popular TheHive and Cortex workflows
Analyze emails with S1EM
With workflow, you analyze Email with TheHive/Cortex
https://github.com/V1D1AN/S1EM/wiki/Soar-guide
Build your own TheHive and Cortex integration
Create custom TheHive and Cortex workflows by choosing triggers and actions. Nodes come with global operations and settings, as well as app-specific parameters that can be configured. You can also use the HTTP Request node to query data from any app or service with a REST API.
TheHive and Cortex integration details
Other integrations with TheHive
Other integrations with Cortex
FAQs
Can TheHive connect with Cortex?
Can I use TheHive’s API with n8n?
Can I use Cortex’s API with n8n?
Is n8n secure for integrating TheHive and Cortex?
How to get started with TheHive and Cortex integration in n8n.io?
Looking to integrate TheHive and Cortex in your company?
Over 3000 companies switch to n8n every single week
Why use n8n to integrate TheHive with Cortex
Build complex workflows, really fast
