{"id":14235389,"url":"https://github.com/TheHive-Project/Hippocampe","last_synced_at":"2025-08-10T23:31:21.478Z","repository":{"id":85075443,"uuid":"72828565","full_name":"TheHive-Project/Hippocampe","owner":"TheHive-Project","description":"Threat Feed Aggregation, Made Easy","archived":true,"fork":false,"pushed_at":"2020-07-13T13:13:07.000Z","size":866,"stargazers_count":166,"open_issues_count":28,"forks_count":44,"subscribers_count":24,"default_branch":"master","last_synced_at":"2025-01-18T18:45:43.962Z","etag":null,"topics":["aggregator","feed","free","free-software","intel","open-source","python","thehive","threat-score","threatintel"],"latest_commit_sha":null,"homepage":"https://thehive-project.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/TheHive-Project.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-11-04T08:29:51.000Z","updated_at":"2024-09-06T13:33:40.000Z","dependencies_parsed_at":null,"dependency_job_id":"226deafd-f1fd-48dd-ad1a-9b528df5030a","html_url":"https://github.com/TheHive-Project/Hippocampe","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/TheHive-Project/Hippocampe","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheHive-Project%2FHippocampe","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheHive-Project%2FHippocampe/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheHive-Project%2FHippocampe/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheHive-Project%2FHippocampe/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/TheHive-Project","download_url":"https://codeload.github.com/TheHive-Project/Hippocampe/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheHive-Project%2FHippocampe/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":269804836,"owners_count":24477867,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-10T02:00:08.965Z","response_time":71,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aggregator","feed","free","free-software","intel","open-source","python","thehive","threat-score","threatintel"],"created_at":"2024-08-20T21:01:50.996Z","updated_at":"2025-08-10T23:31:21.467Z","avatar_url":"https://github.com/TheHive-Project.png","language":"Python","funding_links":[],"categories":["Python","Uncategorized"],"sub_categories":["Uncategorized"],"readme":"\u003cp align=\"center\"\u003e\n\u003cimg src=\"images/Hippocampe-logo.png\" width=\"400\"\u003e\n\u003c/p\u003e\n\n**Hippocampe** is a threat feed aggregator. It gives your organisation a threat feed 'memory' and lets you query it easily through a REST API or from a Web UI. If you have a [Cortex](https://github.com/CERT-BDF/Cortex) server, there's already an analyzer to query Hippocampe. And if you use [TheHive](https://github.com/CERT-BDF/TheHive) as a security incident response platform, you can customize the JSON output produced by the analyzer to your taste or use the report template that we kindly provide.\n\nHippocampe aggregates feeds from the Internet in an Elasticsearch cluster. It has a REST API which allows to search into its 'memory'. It is based on a Python script which fetchs URLs corresponding to feeds, parses and indexes them.\n\n# Hipposcore\nHippocampe allows analysts to configure a confidence level for each feed that can be changed over time and when queried, it will provide a score called Hipposcore that will aid the analyst decide whether the analyzed observables are innocuous or rather malicious.\n\n# License\nHippocampe is an open source and free software released under the [AGPL](https://github.com/CERT-BDF/Cortex/blob/master/LICENSE) (Affero General Public License). We, TheHive Project, are committed to ensure that Hippocampe will remain a free and open source project on the long-run.\n\n# Roadmap\n * Extracting observable or IOCs from an email or a report \n * Adding data manually\n * Distinguish fields generate by Hippocampe from those generated by feeds\n * Show related data (eg, when searching for a URL, show the domain as related if hippocampe knows it)\n * Index MISP attributes\n\n# Updates\nInformation, news and updates are regularly posted on [TheHive Project Twitter account](https://twitter.com/thehive_project) and on [the blog](https://blog.thehive-project.org/).\n\n# Contributing\nWe welcome your contributions. Please feel free to fork the code, play with it, make some patches and send us pull requests.\n\n# Support\nPlease [open an issue on GitHub](https://github.com/CERT-BDF/Hippocampe/issues/new) if you'd like to report a bug or request a feature.\n\nAlternatively, if you need to contact the project team, send an email to \u003csupport@thehive-project.org\u003e.\n\n# Community Discussions\nWe have set up a Google forum at \u003chttps://groups.google.com/a/thehive-project.org/d/forum/users\u003e. To request access, you need a Google account. You may create one [using a Gmail address](https://accounts.google.com/SignUp?hl=en) or [without one](https://accounts.google.com/SignUpWithoutGmail?hl=en).\n\n# Website\n\u003chttps://thehive-project.org/\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FTheHive-Project%2FHippocampe","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FTheHive-Project%2FHippocampe","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FTheHive-Project%2FHippocampe/lists"}