TheHive | Configure | Responder

1. In Cortex, select the Organization tab.

2. Select the Responders tab.

3. Query for “EclecticIQ_Indicator_API_1_0”.

4. For the EclecticIQ_Indicator_API_1_0 responder, select + Enable.

5. Enter:

   • the url for your EclecticIQ Intelligence Center instance.

   • your EclecticIQ Intelligence Center API token.
     See our documentation on creating API tokens for more information

   • the group name for a group in EclecticIQ Intelligence Center that you’d like to have as the source of the entities exported from TheHive.
     See our group documentation to learn how groups work.

6. Select Save.

You can now use the EclecticIQ Responder for TheHive or configure the EclecticIQ Analyzer for TheHive if you haven’t yet.