Enrich CrowdStrike detections with VirusTotal and send to TheHive
Automatically enrich CrowdStrike endpoint detections with VirusTotal and create fully enriched alerts in TheHive. When a new endpoint detection fires in CrowdStrike, this Tines story instantly creates a structured alert in TheHive and kicks off three parallel enrichment paths; checking every IP, file hash, and URL against VirusTotal. By the time your analyst opens the alert, the context is already there.