PurpleLab-Cortex-Analyzer

PurpleLab Cortex Analyzer enhances TheHive incident responses by automating uploads and detonations of executables tied to cases. This tool streamlines SOC workflows, improving threat analysis and security outcomes.

Instalation :

1. Place the two files in the /opt/Cortex-Analyzers/analyzers/ folder.

2. In PurpleLabAnalyzer.py, replace all occurrences of YourPurpleLabURL with the IP address of your PurpleLab instance.

3. Configure the analyzer in Cortex.

analyzer.purplelab.mp4