https://github.com/jpsenior/threataggregator

Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc.
https://github.com/jpsenior/threataggregator

Last synced: 2 months ago
JSON representation

Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc.

• Host: GitHub
• URL: https://github.com/jpsenior/threataggregator
• Owner: jpsenior
• License: mit
• Created: 2015-02-27T01:28:18.000Z (over 9 years ago)
• Default Branch: master
• Last Pushed: 2016-02-05T16:09:36.000Z (over 8 years ago)
• Last Synced: 2024-01-24T20:46:54.775Z (5 months ago)
• Language: Python
• Size: 55.7 KB
• Stars: 78
• Watchers: 12
• Forks: 27
• Open Issues: 5
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Lists

• awesome-malware-analysis - threataggregator - (Open Source Threat Intelligence / Tools)
• paralax-awesome-malware-analysis - threataggregator - (Open Source Threat Intelligence / Tools)
• awesome-malware-analysis- - threataggregator - (Open Source Threat Intelligence / Tools)
• awesome-malware-analysis - threataggregator - (Open Source Threat Intelligence / Tools)
• awesome-malware-analysis - threataggregator - (Open Source Threat Intelligence / Tools)
• awesome-malware-analysis - threataggregator - (Open Source Threat Intelligence / Tools)
• awesome-malware-analysis - threataggregator - (Open Source Threat Intelligence / Tools)
• awesome-malware-analysis - threataggregator - (Open Source Threat Intelligence / Tools)
• awesome-malware-analysis - threataggregator - (Open Source Threat Intelligence / Tools)
• awesome-malware-analysis - threataggregator - (Open Source Threat Intelligence / Tools)
• fucking-awesome-malware-analysis - threataggregator - (Open Source Threat Intelligence / Tools)

README

        
# threataggregator

Aggregates security threats from a number of online sources, and outputs to Syslog CEF, Snort Signatures, Iptables rules, hosts.deny, etc.

feeds.py contains a dictionary list of various feeds to use.

config.py contains a small list of configuration settings for syslog purposes.

Usage:

Simply run threataggregator.py with no arguments.

Applciation will grab HTTP-based feeds from feeds.py, and send syslog packets to the target specified in config.py

standard json-formatted output will also be displayed stdout from threataggregator.py