Book a demo Log in Sign up

Product

The product

Explore our core capabilities to transform your workflows.

Cases

Automation for the threats you know, cases for the ones you don’t.

What’s new

Discover our latest updates and releases.

Solutions

By team

Security IT Infrastructure Engineering Product

Tines for

Partners Federal MSSPs

Resources

Discover

Blog Podcast Case studies Events Webinars

Learn

Library University Docs API

Support

Tines Explained ^↗Slack community ^↗Contact

⌘K

Story runs Story versions Importing and exporting Send to Story Groups Change Control Time saved Workflows as APIs

Email mode IMAP mode

Send Email HTTP Request Trigger

Event Transformation

Deduplicate mode Delay mode Explode mode Extract mode Implode mode Message-only mode Throttle mode

Public Templates

Frequently used templates

Run Python script

Private Templates

Working with files Time saved Shortcuts

Collecting input with forms Building apps and flows Branding and style Distribution and access control List of page elements Collections

Text type AWS type HTTP request type JWT type Mutual TLS type OAuth 2.0 type

AbuseIPDB APIVoid Asana BambooHR Box Cisco Umbrella CrowdStrike Darktrace Drata Dropbox EmailRep Figma GitHub GitLab Google Calendar Google Docs Google Service Account Google Sheets Greenhouse GreyNoise HubSpot Intercom Jira Software Mailchimp Material Security Microsoft Graph Microsoft OneDrive Microsoft Outlook Microsoft Teams Notion Okta OpenAI PagerDuty PagerDuty Events API Productboard Pulsedive Recorded Future Salesforce Slack Snowflake Snyk Tenable Security Center Tenable Vulnerability Management TheHive Project Tines Typeform URLScan.io VirusTotal Wiz Zendesk

Examples Referencing data

ABSACOSAES_DECRYPTAES_ENCRYPTANDAPPENDARRAYASINAT_LEASTAT_MOSTBASE64URL_DECODEBASE64URL_ENCODEBASE64_DECODEBASE64_ENCODEBYTESIZECAPITALIZECEILCHUNK_ARRAYCOMBINE_COLUMNS_AND_ROWSCOMPACTCONCATCOSCOUNTIFCSV_PARSECSV_PARSE_TO_OBJECTSDATEDATE_DIFFDATE_PARSEDAYDEEP_MERGEDEFAULTDELETEDIFFERENCEDISTANCE_OF_TIME_IN_WORDSDIVIDED_BYDOWNCASEEML_PARSEENDS_WITHERRORESCAPEESCAPE_ONCEFILTERFINDFIRSTFLATTENFLATTEN_JSONFLOORFORCE_ARRAYGENERATE_RSA_KEYSGETGUNZIPGZIPHCL_PARSEHEX_PARSEHMAC_SHA1HMAC_SHA1_BASE64HMAC_SHA256HMAC_SHA256_BASE64HOURHTML_DECODEHTML_ENCODEIFIF_ERRORINCLUDESINDEX_OFINSERTINTERSECTIONIN_CIDRIS_BLANKIS_EMAILIS_EMPTYIS_IPV4IS_IPV6IS_IP_ADDRESSIS_JSONIS_PRESENTIS_URLIS_XMLIS_YAMLJOINJSONPATHJSON_PARSEJWT_SIGNKEYSLAMBDALASTLAST_INDEX_OFLDIF_PARSELEGACY_STRINGIFYLEVENSHTEIN_DISTANCELSTRIPMAPMAP_LAMBDAMATCHMAXMD5MD5_BASE64MERGEMIME_HEADER_DECODEMINMINUSMINUTEMODULOMONTHMSG_PARSENEAT_JSONNEWLINE_TO_BRNOTNOWNUMBEROBJECTOBJECTS_TO_CSVORPARSE_URLPLURALIZEPLUSPREPENDPROMPTPUSHRANDOMRANDOM_ELEMENTRANDOM_STRINGRANGEREDUCEREGEX_EXTRACTREGEX_REPLACEREJECTREMOVEREMOVE_FIRSTREMOVE_KEYREPLACEREPLACE_FIRSTREVERSEROTATEROUNDRSA_AES_HYBRID_DECRYPTRSA_AES_HYBRID_ENCRYPTRSA_DECRYPTRSA_ENCRYPTRSTRIPSECONDSET_KEYSHA1SHA256SHA256_BASE64SHA512SHUFFLESINSIZESLICESLICE_ARRAYSORTSORT_NATURALSPLITSQRTSTARTS_WITHSTORY_RUN_GUIDSTORY_RUN_LINKSTRIPSTRIP_HTMLSTRIP_NEWLINESSUMTALLYTEXTTIMESTODAYTO_CSVTO_HEXTO_JSONTO_SNAKE_CASETO_XMLTO_YAMLTRANSLITERATETRUNCATETRUNCATEWORDSTYPEUNFLATTEN_JSONUNIONUNIQUNIX_TIMESTAMPUNZIPUPCASEURL_DECODEURL_ENCODEUUIDVALUESWHEREXML_PARSEYAML_PARSEYEARZIPZSCALER_OBFUSCATE_API_KEY

Operators Language description

Records & cases

Cases home Creating a case

Navigating a case

Case management

User administration

Custom roles SCIM

Single Sign On Teams Custom certificate authority Custom Sender Email Addresses Email-based login flow IP access control

Installing the Tines Tunnel on AWS Fargate FAQs

Command-over-HTTP

Connectivity requirements Additional deployment options

Before you begin

Tines - Fargate architecture Deploying Tines on AWS Fargate Upgrading Tines on AWS Fargate

Troubleshooting Tines on AWS Fargate

Restarting Tines on AWS Fargate Log Collection on AWS Fargate

Migrating from an RDS instance to an Aurora cluster Migration and Recovery for Tines on AWS Fargate Upgrading from PostgreSQL 11 to PostgreSQL 14 - AWS Fargate Optional: Install sql-over-http for AWS Fargate

Tines - Docker compose architecture Prerequisites for deploying Tines on Docker Compose Deploying Tines on Docker Compose Upgrading Tines on Docker Compose Troubleshooting Tines on Docker Compose Optional: Self-hosting sql-over-http for Docker Compose Replace default PostgreSQL Password Upgrading from PostgreSQL 11 to PostgreSQL 14 - Docker Compose

Accessing Action Templates in Air-Gapped Tines Deployments Updating Tenant Limits Job Management Self-Hosted Telemetry Using Redis Sentinel Utilizing Database Reader Endpoints Running with OpenSSL FIPS Upgrading from PostgreSQL 11 to PostgreSQL 14 Upgrading Redis to 6.2 or above Resolving openSSL 3 upgrade issues Release notes

Public Templates

Frequently used templates

Frequently used templates

We have some templates that are more popular than others, and are detailed here.

Was this helpful?

Public Templates Run Python script

Product

Meet the product
What’s new
Build apps
Cases
Formulas
Pricing model

Solutions

Security
IT
Infrastructure
Engineering
Product
Partners
Federal
MSSPs

Resources

Blog
Podcast
Case studies
Events
Webinars
University
Docs
API
Library
Tines Explained
Get certified
YDWWT

Company

About us
Careers
Contact
Newsroom
Legal and privacy
Security
Trust center

Connect

Slack Community
LinkedIn
Twitter
YouTube

RSS

Blog
Product updates
Library
Self-hosting releases