What actions can I run in Cortex?

13 actions are available, including "Get Analyzer", "Get Job", and "Get Job Report", and more. Run them from any trigger in your automation stack — map fields once and they execute automatically.

Do I need to write code to automate this?

No. Most automations are built visually on the canvas by picking triggers, actions, and mapping fields. You can add custom JavaScript with Functions when advanced logic is needed — but it is never required.

Is the integration secure?

Yes. Connections are authenticated per account, credentials are encrypted at rest, and you can enforce approvals and team-level access controls on any automation.

Cortex Integrations

Run TheHive Cortex analyzers and responders, and track their jobs. When Cortex fires an event, update docs, notify on-call, or open a follow-up task.

Explore Documentation

GDPR
Data Encryption
2FA
Local Data Region

Get AnalyzerReturns a single analyzer.
Get JobReturns a single job.
Get Job ReportReturns the report for a completed job.
List AnalyzersRetrieves available analyzers.
List JobsRetrieves analyzer/responder jobs.
List RespondersRetrieves available responders.
Delete AnalyzerRemoves a custom analyzer registration.
Delete JobDeletes a job record.
Make an API CallPerforms an arbitrary authorized API call.
Run AnalyzerSubmits an observable to an analyzer.
Run ResponderRuns a responder against a TheHive entity.
Submit JobSubmits a file-type observable to an analyzer.
Update Analyzer ConfigurationUpdates org-level analyzer configuration.

When to use Cortex

Common scenarios where Cortex automation saves time and reduces manual work.

Run "Get Analyzer" in Cortex from any upstream event — map fields once and let the automation handle the rest.
Automate "Get Job" in Cortex as a workflow step — combine it with triggers, filters, and AI steps for full-pipeline coverage.
Combine "Get Job Report" from Cortex with triggers or actions in other apps to close the loop — one event, many downstream outcomes.

Frequently asked questions

Common questions about automating Cortex in your workflows.

Cortex has no triggers, but it provides 13 actions including "Get Analyzer", "Get Job", and "Get Job Report". Pair them with triggers from other apps to automate Cortex tasks.

Cortex Integrations

When to use Cortex

Frequently asked questions

Cortex Integrations

When to use Cortex

Connect Cortex to any app in workflows

Frequently asked questions

Connect Cortex to any app in workflows

Connect Cortex to any app in workflows

Connect Cortex to any app in workflows

Cortex Integrations

Cortex triggers and actions

When to use Cortex

Frequently asked questions

What triggers does Cortex support?

What actions can I run in Cortex?

Do I need to write code to automate this?

Is the integration secure?

Cortex Integrations

Cortex triggers and actions

When to use Cortex

Connect Cortex to any app in workflows

Frequently asked questions

What triggers does Cortex support?

What actions can I run in Cortex?

Do I need to write code to automate this?

Is the integration secure?

Connect Cortex to any app in workflows

Connect Cortex to any app in workflows

Connect Cortex to any app in workflows