Cortex

No entries match these filters. Clear filters

1. 4.2.0 Oct 20, 2026 · issue 115

   Cortex 4.2.0 adds PKCEPKCEProof Key for Code Exchange, an OAuth safeguard that binds an authorization code to the client that requested it. An intercepted code cannot be redeemed without the client's matching verifier. support for OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. and a new job.kubernetes.imagePullSecrets configuration option.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 4.2.0 https://github.com/TheHive-Project/Cortex.git
   # already have the repo? check out this version:
   $ git checkout 4.2.0

   └──▷ USE IT
   Pull analyzer/responder job images from a private registry in Kubernetes by referencing an image pull secret.
   hcl copy

   job {
     kubernetes {
       imagePullSecrets = ["my-registry-secret"]
     }
   }

   • Adds PKCE support in OAuth2 authentication.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Sets backoffLimit to 0 for analyzer and responder jobs in Kubernetes.
   • Adds PKCE support in OAuth2 authentication.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

2. 4.1.0 Jun 30, 2026 · issue 020

   Cortex 4.1.0 adds audit logging for user actions in analyzer/responder catalogs.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 4.1.0 https://github.com/TheHive-Project/Cortex.git
   # already have the repo? check out this version:
   $ git checkout 4.1.0

3. 4.0.0 Nov 27, 2025 · release notes

   Cortex 4.0 adds Elasticsearch 8 support and drops 7.x compatibility

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 4.0.0 https://github.com/TheHive-Project/Cortex.git
   # already have the repo? check out this version:
   $ git checkout 4.0.0

   └──▷ BREAKING ON UPGRADE

   • !Elasticsearch 7.x and earlier versions are no longer supported; must upgrade both Elasticsearch and Cortex simultaneously
4. 3.2.0 Jun 3, 2025 · release notes

   Cortex 3.2.0 adds Kubernetes and Docker registry auth support plus a new API endpoint for user API keys

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 3.2.0 https://github.com/TheHive-Project/Cortex.git
   # already have the repo? check out this version:
   $ git checkout 3.2.0

   └──▷ TRY IT
   Use the new API to programmatically set or update a user's API key for Cortex integrations.
   copy

   $ PUT /api/user/apikey?key={apikey}

5. 3.1.7 Oct 7, 2022 · release notes

   Cortex 3.1.7 adds job parameter visibility in the WebUI report page.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 3.1.7 https://github.com/TheHive-Project/Cortex.git
   # already have the repo? check out this version:
   $ git checkout 3.1.7

   └──▷ HOW TO FIND IT
   Verify passed arguments for a completed analysis directly from the UI report.
   📍Navigate to the report page for an existing job to view the job parameters section.
   • Display job parameters in the report page

   1 detail in Everything

6. 3.1.0-RC1 Prerelease Sep 15, 2020 · release notes

   Cortex 3.1.0-RC1 adds ElasticSearch 7 support and fixes OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. login

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 3.1.0-RC1 https://github.com/TheHive-Project/Cortex.git
   # already have the repo? check out this version:
   $ git checkout 3.1.0-RC1

   • Adds ElasticSearch 7 compatibility for the observability backend

   1 detail in Everything

7. 3.0.1 Sep 15, 2020 · release notes

   Cortex 3.0.1 adds Play secret key logging and handles second/minute-rate limits for Flavors and Analyzers.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 3.0.1 https://github.com/TheHive-Project/Cortex.git
   # already have the repo? check out this version:
   $ git checkout 3.0.1

8. 3.0.0-RC3 Prerelease Jun 5, 2019 · release notes

   Cortex 3.0.0-RC3 adds ElasticSearch 6 support and improves the job details page UI

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 3.0.0-RC3 https://github.com/TheHive-Project/Cortex.git
   # already have the repo? check out this version:
   $ git checkout 3.0.0-RC3

   • Adds support for ElasticSearch 6 as a backend datastore
   • Improves the job details page with better information display

   2 details in Everything

9. 3.0.0-RC1 Prerelease May 10, 2019 · release notes

   Cortex 3.0.0-RC1 introduces file-based communication for analyzers/responders and removes job size limits.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 3.0.0-RC1 https://github.com/TheHive-Project/Cortex.git
   # already have the repo? check out this version:
   $ git checkout 3.0.0-RC1

   • Removes the previous maximum payload size limit for analyzer/responder jobs

   1 detail in Everything

10. 2.1.3 May 10, 2019 · release notes

    Cortex 2.1.3 adds Drone CI integration and PAP property visibility in job listings

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2.1.3 https://github.com/TheHive-Project/Cortex.git
    # already have the repo? check out this version:
    $ git checkout 2.1.3

    • Adds configuration support for Drone continuous integration
    • Includes the PAP property in job list outputs

    2 details in Everything

11. 2.1.1 Oct 12, 2018 · release notes

    Cortex 2.1.1 adds custom root context support and stabilizes beta package channels.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2.1.1 https://github.com/TheHive-Project/Cortex.git
    # already have the repo? check out this version:
    $ git checkout 2.1.1

    • Publishes stable versions in beta package channels for earlier availability

    1 detail in Everything

12. 2.1.0 Sep 25, 2018 · release notes

    Cortex 2.1.0 adds PAP value visibility in Org > Analyzers screen and analyzer cache configuration display.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2.1.0 https://github.com/TheHive-Project/Cortex.git
    # already have the repo? check out this version:
    $ git checkout 2.1.0

    • Shows PAP (Passive Analysis Priority) value directly in the Org > Analyzers screen for each analyzer row
    • Displays the full cache configuration details on the analyzer admin page

    2 details in Everything

13. 2.0.4 Apr 13, 2018 · release notes

    Cortex 2.0.4 adds UI support for Read/Analyze users to manage their own API keys.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2.0.4 https://github.com/TheHive-Project/Cortex.git
    # already have the repo? check out this version:
    $ git checkout 2.0.4

    • Read/Analyze user role can now view and change their own API key via the UI.

    1 detail in Everything

14. 2.0.3 Apr 13, 2018 · release notes

    Cortex 2.0.3 adds support for arbitrary parameters in jobs

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2.0.3 https://github.com/TheHive-Project/Cortex.git
    # already have the repo? check out this version:
    $ git checkout 2.0.3

    • Allow arbitrary parameters for a job

    1 detail in Everything

15. 2.0.0 Apr 3, 2018 · release notes

    Cortex 2.0 adds proxy configuration and conditional analyzer visibility to prevent errors from missing configs.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2.0.0 https://github.com/TheHive-Project/Cortex.git
    # already have the repo? check out this version:
    $ git checkout 2.0.0

    • Adds proxy configuration block in the application config file to support proxies.
    • Analyzers are now displayed only when their required configuration values are set, preventing UI errors when clicking New Analysis.

    2 details in Everything

16. 1.1.0 May 24, 2017 · release notes

    Cortex 1.1.0 adds .deb/.rpm package generation and analyzer metadata display

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.0 https://github.com/TheHive-Project/Cortex.git
    # already have the repo? check out this version:
    $ git checkout 1.1.0

    • Adds .deb and .rpm package generation for distributed deployment.
    • Displays analyzer metadata in the UI.

    2 details in Everything