Excelent tool on Enterprise Level
What do you like best?
The Alert Management and the Openness of TheHive allows it to easily integrate from small to Enterprise large installations. We are able to use it in a very big Environment with extremly complex use-cases and Operation processes and it works really great.
It is becoming a new de-facto-Standard for SOAR Tools on enterprise Level.
Especially the native Integration of MISP Interface is really helpfull. Addintional the New TheHiveFile-System, Multi-Tenancy, Case-, Alert- and Observable sharing are outstanding features, that makes this product to choince number 1.
What do you dislike?
TheHive is grewing constantly and as there are always new Features you have to ensure that you can install the new updates in time to be able to constatnly increasing productivitiy.
Sometimes it takes a little time to get reaction from the support team, especially regarding new feature requests.
What problems are you solving with the product? What benefits have you realized?
Multi-Tier OC Operations