Csirt Python Packages

karton-core

Distributed malware processing framework based on Python, Redis and S3.

intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

convey

CSV processing and web related data types mutual conversion

domainclassifier

DomainClassifier is a Python (2/3) library to extract and classify Internet domains/hostnames/IP addresses from raw unstructured text files following their DNS existence, localization or attributes.

opensecstack-sdk

Open-source cybersecurity ecosystem for Europe and beyond — 11 integrated security platforms (API security, NIS2 compliance, incident response, threat intel, DDoS mitigation, AI-attack defence, and more) plus a shared identity layer and CITADEL governance/audit engine.

karton-config-extractor

Static configuration extractor for the Karton framework

karton-archive-extractor

Extractor of various archive formats for Karton framework

karton-classifier

File type classifier for the Karton framework.

karton-dashboard

A small Flask application that allows for Karton task and queue introspection.

intelmqmail

IntelMQ command line tool to process events and send out email notifications.

karton-mwdb-reporter

Karton service that uploads analyzed artifacts and metadata to MWDB Core

karton-autoit-ripper

AutoIt script ripper for Karton framework

karton-yaramatcher

File and analysis artifacts yara matcher for Karton framework

karton-asciimagic

Various decoders for ascii-encoded executables for Karton framework