The Cortex App for the Hive is used for enriching observables in Cortex against a ThreatQ instance. After an observable is enriched in Cortex using the ThreatQ app, the enriched content can be seen in the cases in the Hive using the native Hive integration.