Skip to content

sbilly/bearded-avenger

 
 

Repository files navigation

Documentation

See: http://bearded-avenger.readthedocs.org

Latest Release

See the releases to checkout out the latest release

Getting Started

QuickStart

$ mkvirtualenv cif
$ python setup.py develop
$ supervisord -c hacking/develop.conf

Vagrant

Ubuntu 14 LTS

$ vagrant up
$ vagrant ssh
$ workon cif
$ cd /vagrant; supervisord -c hacking/develop.conf
$ cif-smrt -r rules/default -d --test

CentOS 7.1

$ export VAGRANT_VAGRANT_FILE=Vagrantfile.centos
$ vagrant up
$ workon cif
$ cd /vagrant; supervisord -c hacking/develop.conf
$ cif-smrt -r rules/default -d --test

Clean Install [localhost]

Ubuntu 14 LTS

$ sudo apt-get update && sudo apt-get install -y python-pip
$ sudo pip install ansible
$ tar -zxvf bearded-avenger-X.X.X.tar.gz
$ cd bearded-avenger-X.X.X
$ sudo ansible-playbook -i "localhost," -c local deployment/ansible/ubuntu.yml
$ cif -V

Testing

$ sudo su - cif
$ cif -V
$ ps aux | grep cif   # make sure cif-router/cif-httpd/cif-storage, etc are running
$ cif-smrt -r /etc/cif/rules/default/drg.yml -f ssh -d --test

# find an address from https://www.dragonresearchgroup.org/insight/sshpwauth.txt
$ cif -q 188.10.149.221

Getting Involved

There are many ways to get involved with the project. If you have a new and exciting feature, or even a simple bugfix, simply fork the repo, create some simple test cases, generate a pull-request and give yourself credit!

If you've never worked on a GitHub project, this is a good piece for getting started.

Development

Some of the tools we use:

Some useful books:

COPYRIGHT AND LICENCE

Copyright (C) 2015 the CSIRT Gadgets Foundation

Free use of this software is granted under the terms of the GNU Lesser General Public License (LGPLv3). For details see the files COPYING included with the distribution.

About

CIF v3 -- the smartest way to consume threat intelligence

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Python 69.1%
  • Shell 26.9%
  • Makefile 2.4%
  • Ruby 1.1%
  • Tcl 0.5%