https://github.com/FIRSTdotorg/global-irt

Global IRT (Incident Response Team) is a project to describe common IRT and abuse contact information
https://github.com/FIRSTdotorg/global-irt

Last synced: about 1 month ago
JSON representation

Global IRT (Incident Response Team) is a project to describe common IRT and abuse contact information

• Host: GitHub
• URL: https://github.com/FIRSTdotorg/global-irt
• Owner: FIRSTdotorg
• License: bsd-2-clause
• Created: 2015-06-03T15:11:05.000Z (over 9 years ago)
• Default Branch: master
• Last Pushed: 2023-12-15T12:27:02.000Z (about 1 year ago)
• Last Synced: 2024-04-16T18:21:53.187Z (8 months ago)
• Size: 34.2 KB
• Stars: 58
• Watchers: 18
• Forks: 39
• Open Issues: 6
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-csirt - global-irt

README

        
# global-irt

[![Build Status](https://travis-ci.org/FIRSTdotorg/global-irt.svg?branch=master)](https://travis-ci.org/FIRSTdotorg/global-irt)

Global IRT (Incident Response Team) is a project to describe common IRT and abuse contact information

The global-irt project aims at finding a common format/naming scheme between different CERT/CSIRT directories.

At the time of this writing, there are a couple of CERT/CSIRT directories:

  * https://api.first.org  at FIRST.org

  * the [national CSIRT database](https://www.cert.org/incident-management/national-csirts/national-csirts.cfm) at cert.org

  * the [Trusted Introducer](http://trusted-introducer.org) database

  * etc.

(see also [RIPE-658](https://www.ripe.net/publications/docs/ripe-658) for a list of known abuse contact (and CSIRT/CERT) lookup mechanisms).

Each one of these directories has a different format, different field names and different (but sometimes overlapping) data.

The Global IRT project aims at defining a format which encompasses the existing formats. Also it shall provide a client 

library which can query (if permissions are given) the CERT/CSIRT directories and provide a common answer from all of these databases.

Global IRT tries to provide a query and common output format for the existing CSIRT/CERT directories.

In order to achieve this, a [common taxonomy of CSIRTs](https://github.com/FIRSTdotorg/global-irt/wiki/CSIRT-CERT-types) is also very helpful:

with a list of known CSIRT/CERT types (national, PSIRT, etc.) a sender can choose which CSIRT/CERT to contact.

# How to contribute?

Please read [CONTRIBUTING.md](https://github.com/FIRSTdotorg/global-irt/blob/master/CONTRIBUTING.md)

# What's here?

examples/   ..... find some examples here

Wiki --> click on the wiki link above. 

cert-types/latest.json .....  the latest machine readable version of the IRT type definition

api.md ......initial description of using the global-irt format for use in an API.