Jump to content
Fi8sVrs

GOSINT - Open Source Threat Intelligence Gathering and Processing Framework

Recommended Posts

  • Active Members

The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs). GOSINT allows a security analyst to collect and standardize structured and unstructured threat intelligence. Applying threat intelligence to security operations enriches alert data with additional confidence, context, and co-occurrence. This means that you apply research from third parties to security event data to identify similar, or identical, indicators of malicious behavior. The framework is written in Go with a JavaScript frontend.

gosint.gif

 

Installation

Please find the installation procedure at http://gosint.readthedocs.io/en/latest/installation.html

There are three ways to get up and running:

  1. Bash install script
  2. Docker
  3. Manual installation

 

Updates

Updating is simple and encouraged as bugs are reported and fixed or new features are added. To update your instance of GOSINT, pull the latest version of GOSINT from the repository and re-run the build command to compile the updated binary.

godep go build -o gosint

 

Configuration

GOSINT needs some quick initial configuration to start making use of the framework features. All the settings you will need to specify can be found under the "Settings" tab.

Please find the configuration procedure at http://gosint.readthedocs.io/en/latest/configuration.html

 

Use

Please find the instructions for use at http://gosint.readthedocs.io/en/latest/use.html

 

Download: GOSINT-master.zip

 

Source: https://github.com/ciscocsirt/GOSINT

 

 

  • Upvote 1
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...