Responders (31)
Trigger automated responses
HarfangLab-GetArtifactLogs v1.0
Get Linux logs artifact
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetArtifactPrefetch v1.0
Get prefetches artifact
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetArtifactMFT v1.0
Get MFT artifact
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-UnisolateHost v1.0
Isolate machine with HarfangLab EDR
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case,thehive:alert
HarfangLab-GetWMI v1.0
Get WMI items on a host
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-DumpProcess v1.0
Dump process memory
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab SearchDriverByHash v1.0
Search a driver load in HarfangLab EDR's telemetry per hash
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case_artifact
HarfangLab-GetPersistence v1.0
Get persistence items on a Linux host
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetArtifactHives v1.0
Get Hives artifact
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetDrivers v1.0
Get drivers loaded on a host
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-SearchHash v1.0
Search a hash in HarfangLab EDR's telemetry
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case_artifact
HarfangLab-GetPipes v1.0
Get pipes on a host
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-SearchSourceIP v1.0
Search an IP in HarfangLab EDR's telemetry
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case_artifact
HarfangLab-GetArtifactFilesystem v1.0
Get Linux filesystem artifact
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetServices v1.0
Get services on a host
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetProcesses v1.0
Get processes running on a host
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetArtifactUSN v1.0
Get USN logs artifact
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetBinary v1.0
Get binary information and download link
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case_artifact
HarfangLab-GetArtifactRamdump v1.0
Get RAM dump artifact
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetSessions v1.0
Get sessions on a host
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-IsolateHost v1.0
Isolate machine with HarfangLab EDR
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case,thehive:alert
HarfangLab-KillProcess v1.0
Kill a process
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case,thehive:alert
HarfangLab-GetNetworkShares v1.0
Get network shares on a host
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetArtifactEvtx v1.0
Get Windows event logs artifact
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetRunKeys v1.0
Get RUN keys on a host
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetStartupFiles v1.0
Get startup files on a host
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetPrefetches v1.0
Get prefetches on a host
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-SearchDestinationIP v1.0
Search an IP in HarfangLab EDR's telemetry
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case_artifact
HarfangLab-GetArtifactAll v1.0
Get all artifacts
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab-GetScheduledTasks v1.0
Get scheduled tasks on a host
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case
HarfangLab SearchDriverByFileName v1.0
Search a driver load in HarfangLab EDR's telemetry per filename
- Author: HarfangLab Product Team
- License: AGPL-V3
- Data Types:
thehive:case_artifact
External Integrations (1)
External integrations that connect HarfangLab with TheHive
TheHive Connector
Native connector provided by HarfangLab to send security events (SecEvents) from the HarfangLab EDR Manager to TheHive.
