https://github.com/cert-edf/iron
Unified cases, seamless integrations
https://github.com/cert-edf/iron
dfir-automation dfir-tools framework security
Last synced: about 2 months ago
JSON representation
Unified cases, seamless integrations
- Host: GitHub
- URL: https://github.com/cert-edf/iron
- Owner: CERT-EDF
- License: mit
- Created: 2025-10-13T08:56:52.000Z (6 months ago)
- Default Branch: main
- Last Pushed: 2025-12-17T08:30:07.000Z (4 months ago)
- Last Synced: 2025-12-20T04:29:25.815Z (3 months ago)
- Topics: dfir-automation, dfir-tools, framework, security
- Language: Python
- Homepage:
- Size: 738 KB
- Stars: 1
- Watchers: 0
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
Awesome Lists containing this project
README
Iron
[](/LICENSE)
Unified cases, seamless integrations
# Introduction
Iron is a minimalist synchronization tool designed to simplify the cases management within the [CERT-EDF/fusion](https://github.com/CERT-EDF/fusion) framework, acting as a centralized interface to create and manage cases, ensuring consistency across services.
Iron pulls together services into a unified, cohesive system.
Iron supports the following services:
- [CERT-EDF/carbon](https://github.com/CERT-EDF/carbon): minimalist digital logbook
- [CERT-EDF/helium](https://github.com/CERT-EDF/helium): minimalist forensic collections manager
- [CERT-EDF/neon](https://github.com/CERT-EDF/neon): minimalist malware database management
- [dfir-iris](https://github.com/dfir-iris): incident responders platform
## Getting Started
> [!NOTE]
> Iron is part of the [CERT-EDF/fusion](https://github.com/CERT-EDF/fusion) framework. This section will guide you for the standalone usage.
Deployment is designed to be simple using Docker.
```bash
export GIT_TAG="$(git describe --tags)"
docker compose up -d
```
Basic HTTP example using Nginx:
```nginx
server {
listen 80;
server_name iron.domain.lan;
access_log /var/log/nginx/iron.access.log;
error_log /var/log/nginx/iron.error.log;
proxy_http_version 1.1;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
location /api {
proxy_pass http://127.0.0.1:8110;
client_max_body_size 4G;
proxy_buffering off;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
}
location / {
proxy_pass http://127.0.0.1:8120;
}
}
```
## Configuration
Refer to the documentation in
- [iron.dist.yml](https://github.com/CERT-EDF/iron/blob/main/server/iron.dist.yml)
- [constant.dist.yml](https://github.com/CERT-EDF/iron/blob/main/server/constant.dist.yml)
## License
Distributed under the MIT License.
## Contributing
Contributions are welcome, see [CONTRIBUTING.md](https://github.com/CERT-EDF/iron/blob/main/CONTRIBUTING.md) for more information.
## Security
To report a (suspected) security issue, see [SECURITY.md](https://github.com/CERT-EDF/iron/blob/main/SECURITY.md) for more information.