Awesome
itamae-thehive
Description
Automated installation of TheHive & Cortex by using itamae.
Supported versions
- OS:
Ubuntu 18.04 LTS
- TheHive:
3.4.0
- Cortex:
3.0.0
- Elasticsearch:
6.8.3
Prerequisite
Please install itamae beforehand.
gem install itamae
How to use
# Apply an itamae recipe to a Vagrant VM
$ itamae ssh --vagrant cookbooks/thehive/default.rb
# Apply an itamae recipe to a remote host
$ itamae ssh --host x.x.x.x cookbooks/thehive/default.rb
After running the itamae recipe, TheHive / Cortex / Elasticsearch work on following ports.
- TheHive:
9000/tcp
- Cortex:
9001/tcp
- Elasticsearch:
9200/tcp
Configuration
Setting up Cortex
Go to http://YOUR_SERVER_ADDRESS:9001
and follow instructions of the official guide.
Setting up TheHive
You need to set your Cortex API key in /etc/thehive/application.conf
.
cortex {
"CORTEX-SERVER-ID" {
url = "http://localhost:9001",
key = "YOUR_API_KEY"
}
}
You have to restart the service before starting setup.
sudo systemctl restart thehive
Then go to http://YOUR_SERVER_ADDRESS:9000
and follow instructions of the official guide.
Notes
- Cortex-Analyzers is installed into
/opt/cortex/Cortex-Analyzers
.