Cortex
Cortex copied to clipboard
TheHive-Project
Intermediate report for long time running analyzers
Intermediate report for long time running analyzers
Request Type
Feature Request
Work Environment
| Question | Answer |
|---|---|
| OS version (server) | RedHat, ... |
| Cortex version / git hash | 3.1.2 |
| Package Type | Docker |
Problem Description
Some analyzers can be long to run (ex: sandbox analysis). It can be usefull for an analyst to have some intermediate short-report indicating the status of a task. Example : Run a sandbox analysis, get a preliminary short-report to indicate status changes (ex: Pending, Running, Completed) or to report the virtual machine name where the analysis is running.
Threatgrid takes 7 minutes to get repot for few domain scan even with single user. I am wondering need great inputs and support how to make its scalable. job timeout and slow response are two major issues.
