{"id":22180567,"url":"https://github.com/dcso/gotie","last_synced_at":"2025-10-12T20:31:06.990Z","repository":{"id":48436690,"uuid":"61564325","full_name":"DCSO/gotie","owner":"DCSO","description":"Go bindings for the DCSO TIE","archived":false,"fork":false,"pushed_at":"2021-07-26T14:22:53.000Z","size":50,"stargazers_count":3,"open_issues_count":0,"forks_count":1,"subscribers_count":4,"default_branch":"master","last_synced_at":"2024-12-02T09:18:39.469Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/DCSO.png","metadata":{"files":{"readme":"Readme.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-06-20T16:48:18.000Z","updated_at":"2021-07-26T14:22:56.000Z","dependencies_parsed_at":"2022-08-24T04:40:25.699Z","dependency_job_id":null,"html_url":"https://github.com/DCSO/gotie","commit_stats":null,"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/DCSO%2Fgotie","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/DCSO%2Fgotie/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/DCSO%2Fgotie/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/DCSO%2Fgotie/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/DCSO","download_url":"https://codeload.github.com/DCSO/gotie/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":236272999,"owners_count":19122531,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-12-02T09:18:43.438Z","updated_at":"2025-10-12T20:31:01.680Z","avatar_url":"https://github.com/DCSO.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"GOTIE [![Build Status](https://travis-ci.org/DCSO/gotie.svg?branch=master)](https://travis-ci.org/DCSO/gotie)\n=====\n\nGo bindings and simple command line client for the\n[DCSO Threat Intelligence Engine API (TIE)](https://tie.dcso.de/).\n\n## Install\n\nTo use the Go binding you will have to install a golang environment and\nconfigure a $GOPATH for your user/system. Most modern distributions include a\nrecent version of Go. To install the bindings and the command line client into\nyour configured $GOPATH you can use the following command:\n\n```bash\n$ go get -u github.com/DCSO/gotie/...\n```\n\nThe command line client expects a configuration file in your home directory\n(~/.gotie) containing the following two variables:\n\n```toml\ntie_token = \"\u003ctoken\u003e\"\npingback_token = \"\u003ctoken\u003e\"\n```\n\nThe `tie_token` is mandatory.\nThe `pingback_token` is optional.\n\n**NOTE:**\nYou can always set an alternative path for the configuration file using the\n*-c / --config* command line flag.\n\n## Command-line Client\n\nThe example command-line client can be used to query the TIE API for IOCs and\nfeeds.\n\n\n```bash\n$ gotie iocs -q \u003cquery_string\u003e\n```\n\nRun `gotie -h` to see all options.\n\n### Output formats\n\nDepending on your use case, you can choose between the output formats\nCSV (default), JSON and Bloom filter. The latter integrates well with the\n[DCSO Bloom filter CLI and lib](https://github.com/DCSO/bloom).\n\n\nRetrieve IOCs of type DomainName created today in JSON format:\n```bash\ngotie iocs -t domainname -f json --created-since $(date +%F)\n```\n\nPrint only value field using jq:\n```bash\ngotie iocs -f json --created-since $(date +%F) | jq '.iocs[] | .value'\n```\n\nBuild a Bloom filter with capacity of 2000 entries and a false-positive probability of 0.01%:\n```bash\ngotie iocs -f bloom --bloom-p 0.0001 --bloom-n 2000 --created-since $(date +%F) \u003e test.bloom\n```\nThe default Bloom filter format (`bloom`) is TIE's 64-bit Bloom filter (v2). Gotie also supports the old Bloom filter format (v1) by specifying `bloomv1`.\n\nPerform a check with the bloom CLI tool:\n```bash\necho www.example.com | bloom check test.bloom\n```\n\nThe value will be echoed for a match, otherwise the tool stays silent. Read\nthe [Bloom CLI Readme](https://github.com/DCSO/bloom) for further details.\n\n\n\n## Tests\n\nTo run the included tests you have to set an environment variable containing\nyour API token:\n\n```bash\nTIE_TOKEN=\u003ctoken\u003e make test\n```\n\n## License\n\nThis software is released under a BSD 3-Clause license.\nPlease have a look at the LICENSE file included in the repository.\n\nCopyright (c) 2016-2018, DCSO Deutsche Cyber-Sicherheitsorganisation GmbH\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdcso%2Fgotie","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdcso%2Fgotie","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdcso%2Fgotie/lists"}