Wazuh > TheHive Integration

[Steven Paugh]

Hello team,

Working through the Wazuh and TheHive integration. Our environment is architected in a way that in order to make this work I need to find a way to include a header into the API calls that Wazuh needs to make to TheHive.

Does anyone know where the source for from thehive4py.api import TheHiveApi is located? My idea here is to edit the source locally to attempt to add the header we need to the requests.

Please feel free to tell me any better paths for this if anything is obvious I'm missing! I'm following along with this documentation: https://wazuh.com/blog/using-wazuh-and-thehive-for-threat-protection-and-incident-response/

As always, thank you for the help!

-Steven

[Sebastian Falcone]

Hello Steven, how are you doing?

I've found the module location with the following command:
sudo /var/ossec/framework/python/bin/pip3 show thehive4py

Should be located at:
/var/ossec/framework/python/lib/python3.9/site-packages

[Sebastian Falcone]

Inside the /var/ossec/framework/python/lib/python3.9/site-packages directory you will find one named thehive4py. It contains all you need for this integration