Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/ciscocsirt/GOSINT
The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
https://github.com/ciscocsirt/GOSINT
golang ioc security threat-intelligence
Last synced: about 2 months ago
JSON representation
The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).
- Host: GitHub
- URL: https://github.com/ciscocsirt/GOSINT
- Owner: ciscocsirt
- License: bsd-3-clause
- Archived: true
- Created: 2017-08-03T18:35:18.000Z (about 7 years ago)
- Default Branch: master
- Last Pushed: 2023-05-09T22:52:02.000Z (over 1 year ago)
- Last Synced: 2024-07-26T09:34:05.859Z (about 2 months ago)
- Topics: golang, ioc, security, threat-intelligence
- Language: JavaScript
- Homepage:
- Size: 968 KB
- Stars: 535
- Watchers: 45
- Forks: 109
- Open Issues: 10
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
Awesome Lists containing this project
- awesome-hacking-lists - ciscocsirt/GOSINT - The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs). (JavaScript)
README
# GOSINT - Open Source Threat Intelligence Gathering and Processing Framework
The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs). GOSINT
allows a security analyst to collect and standardize structured and unstructured threat intelligence. Applying threat intelligence to security operations enriches alert data with additional confidence, context, and co-occurrence. This means that you apply research
from third parties to security event data to identify similar, or identical, indicators of malicious behavior. The framework is written in Go with a JavaScript frontend.
----------------
## Installation
Please find the installation procedure at http://gosint.readthedocs.io/en/latest/installation.html
There are three ways to get up and running:
1. [Bash install script](http://gosint.readthedocs.io/en/latest/installation.html#bash-install)
2. [Docker](http://gosint.readthedocs.io/en/latest/installation.html#docker)
3. [Manual installation](http://gosint.readthedocs.io/en/latest/installation.html#manual-install)
----------------
## Updates
Updating is simple and encouraged as bugs are reported and fixed or new features are added. To update your instance of GOSINT, pull the latest version of GOSINT from the repository and re-run the build command to compile the updated binary.
```
godep go build -o gosint
```
----------------
## Configuration
GOSINT needs some quick initial configuration to start making use of the framework features. All the settings you will need to specify can be found under the "Settings" tab.
Please find the configuration procedure at http://gosint.readthedocs.io/en/latest/configuration.html
----------------
## Use
Please find the instructions for use at http://gosint.readthedocs.io/en/latest/use.html