zeroq / overwatch Goto Github PK

add feature to test a YARA rule for validity when uploading it

detailed view of a single client and its findings

The list view for YARA rules needs pagination.

allow grouping of rules into a single file which can then be used by clients to scan the filesystem

implement deletion of certain clients

implement email alerting in case of discovered security issue (rkhunter scan, YARA rule match, ...)

Allow providing a groupname to the uploaded yara file, to directly associate it with this group. Create group if it does not exist.

implement emergency lockdown feature, deploy IPTables rule to block all network traffic except for incoming SSH from predefined IP address or address range

• OS Type / Version
• Network Interfaces
• List of users

allow uploading of YARA rules

Allow browing of scan results

implement scanning of clients with all uploaded YARA rules

• dummy
• rkhunter

Page to view current groups

implement UI part to add new clients

Allow to use passwords on SSH keys to be used to connect to clients

create some sort of dashboard to present overall scan results

Login required, incl. Password reset

Implement UI to edit exisiting clients

implement grouping feature, to allow multiple clients to be part of a group and perform actions on group instead of single clients