Energy SOAR installation guide

Install

Supported OSes:

  • Red Hat Linux 7
  • Red Hat Linux 8
  • Centos Linux/Stream 7
  • Centos Linux/Stream 8
  • Oracle Linux 8

Run as root in installation package directory

For non-interactive (recommended):

# ./install.sh -n

For interactive:

# ./install.sh -i

For a minimal architecture install

  • TheHive
  • Cortex
  • Elasticsearch 7
  • Cassandra 4

Example interactive installation

====> Do You wish to install the ENERGY SOAR TheHive, as well as the other TheHive dependencies? [y/n] y
[..]
====> Do You wish to install the ENERGY SOAR Cortex, as well as the other Cortex dependencies? [y/n] y
[..]
====> Do You wish to install the Cassandra 4? [y/n] y
[..]
====> Do You wish to install the Elasticsearch 7? [y/n] y
[..]
====> Do You wish to initialize Cortex data? [y/n] y
[..]
====> Do You wish to initialize TheHive data? [y/n] y
[..]

Initialize Cortex data is needed to integrate with TheHive. During this step is created api user and configured in TheHive configuration.

Initialize TheHive data:

  • import MISP Taxonomies
  • create sample users
  • create sample case/alert
  • import Analyzer templates
  • configure Cortex plugin

Sample users

User Password
admin secret
socadmin socadmin
socuser socuser
socro socro