This project is a SIEM with SIRP and Threat Intel, all in one.
https://github.com/V1D1AN/S1EM
#docker #elasticsearch #kibana #logstash #filebeat #malware #suricata #misp #thehive #cortex #sigma #yara #zeek #opencti #mwdb #n8n #velociraptor #arkime #zircolite
Π Π°Π·Π±ΠΈΡΠ°Π΅ΠΌ Π°ΡΡ ΠΈΡΠ΅ΠΊΡΡΡΡ. Π§Π°ΡΡΡ 2. Π§ΠΈΡΡΠ°Ρ Π°ΡΡ ΠΈΡΠ΅ΠΊΡΡΡΠ° Π½Π° ΠΏΡΠΈΠΌΠ΅ΡΠ΅ FastAPI ΠΏΡΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΡ
ΠΠ΄Π΅Ρ ΠΏΡΠΎΠ΅ΠΊΡΠ° - ΡΠΎΠ·Π΄Π°ΡΡ ΠΎΡΠ½ΠΎΡΠΈΡΠ΅Π»ΡΠ½ΠΎ Π½Π΅Π±ΠΎΠ»ΡΡΠΎΠΉ ΠΏΡΠΈΠΌΠ΅Ρ ΠΏΡΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΡ, Π΄Π΅ΠΌΠΎΠ½ΡΡΡΠΈΡΡΡΡΠΈΠΉ ΡΠ°ΡΠΏΡΠΎΡΡΡΠ°Π½ΡΠ½Π½ΡΠΉ ΡΡΠ½ΠΊΡΠΈΠΎΠ½Π°Π»: Π»ΠΎΠ³ΠΈΡΠΎΠ²Π°Π½ΠΈΠ΅, ΠΌΠΎΠ½ΠΈΡΠΎΡΠΈΠ½Π³, Ρ ΡΠ°Π½Π΅Π½ΠΈΠ΅ ΠΈ ΠΎΠ±ΡΠ°Π±ΠΎΡΠΊΡ Π΄Π°Π½Π½ΡΡ , ΠΈΠ½ΡΠ΅Π³ΡΠ°ΡΠΈΡ Ρ Π²Π½Π΅ΡΠ½ΠΈΠΌΠΈ ΡΠΈΡΡΠ΅ΠΌΠ°ΠΌΠΈ ΠΈ ΡΠ°Π±ΠΎΡΡ Ρ ΡΠΎΠ½ΠΎΠ²ΡΠΌΠΈ Π·Π°Π΄Π°ΡΠ°ΠΌΠΈ. Π€ΡΠ½ΠΊΡΠΈΠΎΠ½Π°Π»ΡΠ½ΠΎ ΠΏΡΠΎΠ΅ΠΊΡ ΡΠ΅Π°Π»ΠΈΠ·ΡΠ΅Ρ ΡΠΈΡΡΠ΅ΠΌΡ ΡΠ±ΠΎΡΠ° ΠΈ Π°Π½Π°Π»ΠΈΠ·Π° Π²Π°ΠΊΠ°Π½ΡΠΈΠΉ Ρ Π°Π³ΡΠ΅Π³Π°ΡΠΎΡΠΎΠ² Π²ΡΠΎΠ΄Π΅ HeadHunter. ΠΠΎ Π³ΠΎΡΠ°Π·Π΄ΠΎ Π²Π°ΠΆΠ½Π΅Π΅ Π½Π΅ ΡΠΎ, ΠΊΠ°ΠΊΠΈΠ΅ Π·Π°Π΄Π°ΡΠΈ ΡΠ΅ΡΠ°Π΅Ρ ΡΠΈΡΡΠ΅ΠΌΠ°, Π° ΡΠΎ β ΠΊΠ°ΠΊ ΠΈΠΌΠ΅Π½Π½ΠΎ ΠΎΠ½Π° ΡΡΠΎ Π΄Π΅Π»Π°Π΅Ρ. ΠΡΠΎΡ ΠΏΡΠΎΠ΅ΠΊΡ β ΠΏΡΠ΅ΠΆΠ΄Π΅ Π²ΡΠ΅Π³ΠΎ ΠΎ ΡΡΡΡΠΊΡΡΡΠ΅, Π°ΡΡ ΠΈΡΠ΅ΠΊΡΡΡΠ΅ ΠΈ ΠΏΡΠΈΠ½ΡΠΈΠΏΠ°Ρ . ΠΡΠ½ΠΎΠ²Π½ΡΠ΅ ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΠ΅ΠΌΡΠ΅ ΡΠ΅Ρ Π½ΠΎΠ»ΠΎΠ³ΠΈΠΈ : Python 3.13, FastAPI, Nginx, Uvicorn, PostgreSQL, Alembic, Celery, Redis, Pytest, FileBeat, LogStash, ElasticSearch, Kibana, Prometheus, Grafana, Docker, Docker Compose.
https://habr.com/ru/articles/908082/
#python3 #fastapi #clean_architecture #filebeat #logstash #elasticsearch #kibana #prometheus #grafana
[Friday evening Nick]: "It's been a while since I tried Elasticsearch, I should set it up on my homelab..."
[Saturday evening Nick]: "What have I done."
Surprisingly, #vector is a very efficient and flexible #logshipper.
When using it with #suricata, I was able to transmit more than 40k events per second via https. In the same setup, #filebeat barely reached 9kE/s with the lumberjack protocol.
Le metΓ un #filebeat a la mΓ‘quina y ahora puedo geoposicionar las visitas en el tiempo.
cool! #elasticsearch #kibana #filebeat works! (turns that shit off because its making my server slow)
Mon Dashboard commence a prendre forme :)
