Csirt Python Packages

karton-core

Distributed malware processing framework based on Python, Redis and S3.

intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

domainclassifier

DomainClassifier is a Python (2/3) library to extract and classify Internet domains/hostnames/IP addresses from raw unstructured text files following their DNS existence, localization or attributes.

convey

CSV processing and mutual conversion of web related data types

karton-classifier

File type classifier for Karton framework

intelmqmail

IntelMQ command line tool to process events and send out email notifications.

karton-archive-extractor

Extractor of various archive formats for Karton framework

karton-config-extractor

Static configuration extractor for the Karton framework

karton-dashboard

A small Flask application that allows for Karton task and queue introspection.

karton-yaramatcher

File and analysis artifacts yara matcher for Karton framework

karton-mwdb-reporter

Karton service that uploads analyzed artifacts and metadata to MWDB Core

karton-autoit-ripper

AutoIt script ripper for Karton framework

karton-asciimagic

Various decoders for ascii-encoded executables for Karton framework