Cortex Analyzer Engine
Automated threat intelligence analysis, IP reputation scoring, and digital forensics engine for TheHive.
Why consider Cortex Analyzer Engine?
Cortex is an open-source analysis and response engine built by TheHive Project. It executes automated analyzers and responders against observable data (IPs, hashes, domain names) using VirusTotal, Shodan, and dozens of third-party threat services.
Learn Cortex Analyzer Engine by building
Practical setup notes, real use cases, and copy-ready examples in one focused guide.
In this guide2 sections
Overview of Cortex Analyzer Engine
Cortex automates digital forensics analysis and enriches incident observables with external threat data.
Quickstart
git clone https://github.com/TheHive-Project/Cortex.gitcd Cortexdocker compose up -dConnect Cortex to TheHive to trigger automated VirusTotal and WHOIS analysis on suspect file hashes.
Cortex is licensed under the GNU Affero General Public License v3.0.
Related tools
More options with a similar category or technology profile.
diskus
Minimal, fast alternative to du -sh written in Rust using multi-threaded directory traversal.
peco
Simplistic interactive filtering tool for Unix pipelines, process lists, and file trees.
Dapr CLI
Command-line tool for managing Dapr distributed application runtime environments and sidecars.
Freeze
Generate beautiful image screenshots and SVGs of code snippets and terminal outputs.