• This repository has been archived on 17/Mar/2022
  • Stars
    star
    143
  • Rank 257,007 (Top 6 %)
  • Language
    CSS
  • Created over 10 years ago
  • Updated over 10 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect intelligence from custom or public sources. Automatically updates feeds and tries to further enhance data for dashboards.

Threatelligence v0.1

Threatelligence is a simple project I created to start learning Python which lead me to Elasticsearch and Kibana. I was playing around with some really great open source intelligence frameworks, namely collective-Intelligence Framework (CIF, you can find it on Github). After playing around I figured I wanted to do something similar except make it will be simpler and add some eye-candy to it.

Threatelligence fetches cyber threat intelligence data from various sources available on the Interwebs and feeds the data into Elasticsearch while slightly enriching it. The dashboards which are built using Kibana are used to display data and make searching through the data extremely easy.

World Map Threat Dashboard

I have made made it very easy to add your own custom feeds to Threatelligence, automate the fetching of data and removing old data, see the Customfeeds.md. You should be able to add all kinds of data (whatever you determine as intelligence) to Elasticsearch and then display in the dashboards.

Custom Feeds

Blog entry about it:

http://infosecscapes.blogspot.com/2014/06/threatelligence.html