A dashboard for a real-time overview of threat intelligence from MISP instances

Go to file

Sami Mokaddem 9f942ded9c Added support of TAG albel in live dashboard		2017-10-30 10:44:12 +01:00
config	Conf file support default conf, so that it don't mess with custom configuration + make redis persistant	2017-10-30 09:17:57 +01:00
static	Added support of TAG albel in live dashboard	2017-10-30 10:44:12 +01:00
templates	Added support of TAG albel in live dashboard	2017-10-30 10:44:12 +01:00
LICENSE	add: LICENSE added	2017-10-28 10:33:24 +02:00
README.md	Create README.md	2017-10-27 23:03:23 +02:00
install_dependencies.sh	Fixed leaflet markers pic	2017-10-30 09:55:50 +01:00
retreive_map_pic.py	…
server.py	Conf file support default conf, so that it don't mess with custom configuration + make redis persistant	2017-10-30 09:17:57 +01:00
start.sh	…
zmq_subscriber.py	Conf file support default conf, so that it don't mess with custom configuration + make redis persistant	2017-10-30 09:17:57 +01:00

README.md

MISP-Dashboard

A Dashboard showing live data and statistics from the MISP ZMQ

Installation

Launch ./install_dependencies.sh from the MISP-Dashboard directory
Update the configuration file config.cfg so that it matches your system
- Fields that you may change:
  - RedisGlobal -> host
  - RedisGlobal -> port
  - RedisLog -> zmq_url
  - RedisMap -> pathMaxMindDB

Starting the System

Activate your virtualenv . ./DASHENV/bin/activate
Listen to the MISP feed by starting the zmq_subscriber ./zmq_subscriber.py
Start the Flask server ./server.py

zmq_subscriber options


A zmq subscriber. It subscribe to a ZMQ then redispatch it to the MISP-dashboard

optional arguments:
  -h, --help            show this help message and exit
  -n ZMQNAME, --name ZMQNAME
                        The ZMQ feed name
  -u ZMQURL, --url ZMQURL
                        The URL to connect to