https://github.com/rai-gaurav/excalibur
https://github.com/rai-gaurav/excalibur
osquery
Last synced: about 1 year ago
JSON representation
- Host: GitHub
- URL: https://github.com/rai-gaurav/excalibur
- Owner: rai-gaurav
- License: apache-2.0
- Created: 2019-09-28T06:55:32.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2020-06-12T06:04:14.000Z (about 6 years ago)
- Last Synced: 2025-02-04T11:06:29.071Z (over 1 year ago)
- Topics: osquery
- Language: Perl
- Size: 14.6 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Excalibur
Excalibur is inspired from [Doorman](https://github.com/mwielgoszewski/doorman) which is an osquery fleet manager that allows administrators to remotely manage the osquery configurations retrieved by nodes.
The aim is simple for now.
Harness the power of [osquery](https://github.com/osquery/osquery) and perform Malware analysis using third party API (Virus Total etc.)
# Technology Stack
1. [OsQuery](https://github.com/osquery/osquery)
2. [Kafka](https://github.com/apache/kafka)
3. [Mojolicious Web Framwork (Perl)](https://github.com/mojolicious/mojo)
4. [PostgreSQL](https://github.com/postgres/postgres) or any NoSQL - Database
5. [Microsoft Teams](https://docs.microsoft.com/en-us/graph/teams-concept-overview)/ [Slack](https://api.slack.com/) API for notification
6. [OpenAPI](https://github.com/OAI/OpenAPI-Specification)/ [Swagger](https://github.com/swagger-api/swagger-core)
7. [React.js](https://github.com/facebook/react)/[Vue.js](https://github.com/vuejs/vue) for UI
# Other inspiration
https://www.uptycs.com/blog/deploying-osquery-at-scale-a-comprehensive-list-of-open-source-tools
https://holdmybeersecurity.com/2019/04/25/detecting-malicious-downloads-with-osquery-rsyslog-kafka-python3-and-virustotal/