Skip to content

Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect intelligence from custom or public sources. Automatically updates feeds and tries to further enhance data for dashboards.

Notifications You must be signed in to change notification settings

mmcduffie1/Threatelligence

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Threatelligence v0.1

Threatelligence is a simple project I created to start learning Python which lead me to Elasticsearch and Kibana. I was playing around with some really great open source intelligence frameworks, namely collective-Intelligence Framework (CIF, you can find it on Github). After playing around I figured I wanted to do something similar except make it will be simpler and add some eye-candy to it.

Threatelligence fetches cyber threat intelligence data from various sources available on the Interwebs and feeds the data into Elasticsearch while slightly enriching it. The dashboards which are built using Kibana are used to display data and make searching through the data extremely easy.

World Map Threat Dashboard

I have made made it very easy to add your own custom feeds to Threatelligence, automate the fetching of data and removing old data, see the Customfeeds.md. You should be able to add all kinds of data (whatever you determine as intelligence) to Elasticsearch and then display in the dashboards.

Custom Feeds

Blog entry about it:

http://infosecscapes.blogspot.com/2014/06/threatelligence.html

About

Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect intelligence from custom or public sources. Automatically updates feeds and tries to further enhance data for dashboards.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published