Tools/TheHive
TheHive
Open-source security incident-response case-management platform — structures investigations, tracks observables, and coordinates response workflows. Commonly paired with Wazuh (log correlation/detection) to jointly cover what Amazon_Detective provides as one managed service: Wazuh surfaces and correlates the findings, TheHive structures the investigation around them.