Complete Workflow based on free Open Source Products – beginning from detection in Wazuh and MISP, starting an Workflow with the automation Plattform Shuffle, creating a Case in SIRP The Hive, enrich it with Informations from various Databases via analyzer Cortex. After closing this Case archive it back to MISP for sharing.