Real-time triggers from TheHive, ready-made actions in Airtable. Filter, transform, and route without writing a line of code.
Workflows fire when something happens in TheHive.
Pair pages are mirrored. Each direction gets its own dedicated page.
2 TheHive triggers wired to 9 Airtable actions. Most-used pairing: Alert Created → Create Record.
2 Airtable triggers wired to 3 TheHive actions downstream.
See Airtable → TheHive →Pick a pairing to set it up in two minutes. Each one is a fully editable recipe.
Fires whenever a new alert is created in TheHive (the SOC alerting/case-management platform). Use it to enrich, route, or auto-escalate alerts to a SOAR playbook.
Fires whenever a new alert is created in TheHive (the SOC alerting/case-management platform). Use it to enrich, route, or auto-escalate alerts to a SOAR playbook.
Fires whenever a new alert is created in TheHive (the SOC alerting/case-management platform). Use it to enrich, route, or auto-escalate alerts to a SOAR playbook.
Fires whenever a new alert is created in TheHive (the SOC alerting/case-management platform). Use it to enrich, route, or auto-escalate alerts to a SOAR playbook.
Fires whenever a new case is created in TheHive. Use it to broadcast new investigations to a Slack channel or kick off a Cortex analysis pipeline.
Fires whenever a new case is created in TheHive. Use it to broadcast new investigations to a Slack channel or kick off a Cortex analysis pipeline.
Fires whenever a new case is created in TheHive. Use it to broadcast new investigations to a Slack channel or kick off a Cortex analysis pipeline.
Fires whenever a new case is created in TheHive. Use it to broadcast new investigations to a Slack channel or kick off a Cortex analysis pipeline.
No code, no glue, no half-day setup. Each step is one click.
Open TinyCommand, authorize TheHive and Airtable once each. Both connections are available to every workflow on your account.
Drop the TheHive → Alert Created trigger onto the canvas. TinyCommand auto-registers the webhook.
Optionally add a Filter node ("subject contains URGENT") or an AI step ("classify intent") between trigger and action.
Drop the Airtable → Create Record action below it. Map fields from the TheHive payload into the Airtable inputs.
Hit Publish. TinyCommand runs it in production from second one. Watch the run-log fill up.
