tempbottle / threatelligence Goto Github PK

Threatelligence v0.1

Threatelligence is a simple project I created to start learning Python which lead me to Elasticsearch and Kibana. I was playing around with some really great open source intelligence frameworks, namely collective-Intelligence Framework (CIF, you can find it on Github). After playing around I figured I wanted to do something similar except make it will be simpler and add some eye-candy to it.

Threatelligence fetches cyber threat intelligence data from various sources available on the Interwebs and feeds the data into Elasticsearch while slightly enriching it. The dashboards which are built using Kibana are used to display data and make searching through the data extremely easy.

I have made made it very easy to add your own custom feeds to Threatelligence, automate the fetching of data and removing old data, see the Customfeeds.md. You should be able to add all kinds of data (whatever you determine as intelligence) to Elasticsearch and then display in the dashboards.

Blog entry about it:

http://infosecscapes.blogspot.com/2014/06/threatelligence.html