Review Security Cases
List TheHive cases, read the case matching [case ID or topic], and summarize its returned description and status.
thehive
TheHive AI Employee
Leina connects to TheHive to help you summarize security cases for handover. Ask in your team chat. Leina does the work and brings back the result.
Connect TheHive, choose what to share, and hand off your first task.
Leina + TheHive Example Result
You
Read case 1042 about the suspicious payroll email and summarize its status and investigation notes for the evening handover.
Leina
Case 1042 remains open. The record says the email was quarantined, but confirmation of whether the attachment was opened is still missing.
TheHive · Case brief
Case 1042 · Suspicious payroll email
Containment is recorded; recipient activity is unresolved.
- Recorded status
- Open. Description: payroll-themed email quarantined from the shared finance mailbox.
- Handover question
- The case description does not confirm whether anyone opened the attachment.
What Is a TheHive AI Agent?
AI reads TheHive case descriptions and statuses to prepare a handover grounded in the investigation record. Supplied alert details can also be recorded as new alerts.
You specify the source and the destination. Leina uses the content available to your connection and returns the result for you to review.
TheHive
TheHive is a security incident response platform for managing alerts and investigation cases.
-
Locate case 1042
Find the payroll-email case in the accessible case records.
-
Read the investigation record
Retrieve the full case description and returned status.
-
Draft the handover
Distinguish recorded containment from the unresolved attachment question.
What to Ask Leina to Do with TheHive
Copy a prompt, add your details, and send it to Leina in your connected team chat.
Create a Security Alert
Create a TheHive alert with type [type], source [source], sourceRef [source reference], title [title], and description [description].
thehive
Your next TheHive task can start with a message.
Connect. Ask. Get the Result.
Tell Leina what you need in your team chat. Include the source, destination, and expected result.
-
Connect Your Account
Connect the tools involved and give Leina access to the content it needs.
-
Try a Task
Share the source material, say where the result belongs, and describe what you need.
-
Check the Result
Review the result and any changes in the connected app.
Put Leina to Work in TheHive
Hand off these everyday tasks to your AI employee.
Create Alert
Create a JSON alert in a TheHive 4 instance.
Get Alert
Retrieve one TheHive 4 alert by ID.
List Alerts
List alerts visible to the connected TheHive 4 user.
Create Case
Create a case in a TheHive 4 instance.
Get Case
Retrieve one TheHive 4 case by ID or numeric reference.
List Cases
List cases visible to the connected TheHive 4 user.
More Tools for Your AI Employee
Connect the Apps your work depends on, and give Leina the context to carry the task forward.
Keep the Conversation Moving. Let Leina Pick Up the Work.
Hand off a task while your team is discussing it. Leina uses your connected tools and brings the result back to the conversation.
See How Leina Works in SlackLeinaExample Result Case 1042 remains open. The record says the email was quarantined, but confirmation of whether the attachment was opened is still missing.
Case 1042 · Suspicious payroll email
TheHive + Leina: Your Questions, Answered
Which TheHive version is supported?
These actions target a TheHive 4 instance.
Can I create a case directly?
Provide a title and description to create a case.
Can a private instance be used?
Supply the publicly reachable root instance URL for the connector to access.
Make Leina Your TheHive AI Employee
Start with one task you already need to do. Tell Leina what a finished result should look like.
Connect TheHive, choose what to share, and hand off your first task.