What is Cortex?

Cortex, often associated with TheHive Project, is a powerful observable analysis and investigation tool. It allows security analysts to analyze observables (such as IPs, domains, URLs, email addresses, files, etc.) by querying multiple analyzers in parallel. This helps to quickly identify threats, enrich data, and gain valuable insights during incident response and threat intelligence gathering. It is commonly used in security operation centers (SOCs) to automate and accelerate investigations.