{"id":28417798,"url":"https://github.com/securechicken/tinypeg","last_synced_at":"2025-08-12T00:08:47.425Z","repository":{"id":45457949,"uuid":"388509496","full_name":"securechicken/tinypeg","owner":"securechicken","description":"Provides Amnesty International's \"Pegasus\" domain IOCs transformation to a TinyCheck source format","archived":false,"fork":false,"pushed_at":"2021-07-29T13:02:29.000Z","size":31,"stargazers_count":9,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-07-30T20:39:34.150Z","etag":null,"topics":["indicators-of-compromise","ioc","nso","pegasus","tinycheck"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/securechicken.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-07-22T15:25:09.000Z","updated_at":"2025-01-17T00:49:28.000Z","dependencies_parsed_at":"2022-07-14T12:50:01.188Z","dependency_job_id":null,"html_url":"https://github.com/securechicken/tinypeg","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/securechicken/tinypeg","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/securechicken%2Ftinypeg","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/securechicken%2Ftinypeg/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/securechicken%2Ftinypeg/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/securechicken%2Ftinypeg/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/securechicken","download_url":"https://codeload.github.com/securechicken/tinypeg/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/securechicken%2Ftinypeg/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":269976794,"owners_count":24506467,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-11T02:00:10.019Z","response_time":75,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["indicators-of-compromise","ioc","nso","pegasus","tinycheck"],"created_at":"2025-06-04T08:10:28.115Z","updated_at":"2025-08-12T00:08:47.388Z","avatar_url":"https://github.com/securechicken.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Tinypeg\nTransforms [Amnesty International's Pegasus domain IOCs](https://github.com/AmnestyTech/investigations/tree/master/2021-07-18_nso) to a TinyCheck watcher source format. As so, by simply adding a URL to your TinyCheck configuration, you can require your TinyCheck instance to automatically retrieve, update and check for Pegasus IOCs.\n\n## How to use\nAdd the `https://raw.githubusercontent.com/securechicken/tinypeg/main/tinypeg.json` URL to your TinyCheck watchers' sources. That's all.  \n\nWhile TinyCheck does not allow you to simply copy/paste the URL in the \"Manage IOCs\" section of the backend Web UI (this capability has been prepared and [proposed to the project](https://github.com/KasperskyLab/TinyCheck/pull/77)):\n\n- On your TinyCheck install, edit the TinyCheck configuration file at `/usr/share/tinycheck/config.yaml`. Add the URL as a new source in a new line under `watchers` / `iocs` section, just like in this example:\n```\nwatchers:\n  iocs:\n  - https://raw.githubusercontent.com/KasperskyLab/TinyCheck/main/assets/iocs.json\n  - https://raw.githubusercontent.com/Te-k/stalkerware-indicators/master/indicators-for-tinycheck.json\n  - https://raw.githubusercontent.com/securechicken/tinypeg/main/tinypeg.json\n```\n- Then restart the watchers on TinyCheck (optional) to get an immediate update: `sudo service tinycheck-watchers restart`.\n\n## How to build the TinyCheck-formatted IOCs list\nThis is not required to use the Pegasus IOCs. This is just published as a way for the community to check how the IOCs file is generated. \n\nJust clone the repository, and run `tinypeg.sh` (requires Bash 4+, as well as wget, grep, cut and diff in path). It will write a `tinypeg.json` file as a result.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsecurechicken%2Ftinypeg","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsecurechicken%2Ftinypeg","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsecurechicken%2Ftinypeg/lists"}