Csirt Python Packages

karton-core

Distributed malware processing framework based on Python, Redis and S3.

intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

domainclassifier

DomainClassifier is a Python (2/3) library to extract and classify Internet domains/hostnames/IP addresses from raw unstructured text files following their DNS existence, localization or attributes.

convey

CSV processing and web related data types mutual conversion

karton-classifier

File type classifier for the Karton framework.

karton-config-extractor

Static configuration extractor for the Karton framework

karton-archive-extractor

Extractor of various archive formats for Karton framework

karton-dashboard

A small Flask application that allows for Karton task and queue introspection.

karton-yaramatcher

File and analysis artifacts yara matcher for Karton framework

karton-mwdb-reporter

Karton service that uploads analyzed artifacts and metadata to MWDB Core

intelmqmail

A mail sending module for IntelMQ

karton-autoit-ripper

AutoIt script ripper for Karton framework

karton-asciimagic

Various encoders for ascii-encoded executables for Karton framework