cerebrate

Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other security tools (such as MISP).

Features

• Advanced repository to manage individuals and organisations;
• Key store for public encryption and signing cryptographic keys (e.g. PGP);
• Distributed synchronisation model where multiple Cerebrate instances can be interconnected amongst organisations and/or departments;
• Management of individuals and their affiliations to each organisations;
• Advanced API and CLI to integrate with existing tools (e.g. importing existing directory information);
• Dynamic model for creating new organisational structures;
• Support existing organisational structures such as FIRST.org directory, EU CSIRTs network;
• Local tooling interconnection to easily connect existing tools with their native protocols;

Cerebrate is developed in the scope of the MeliCERTes v2 project.

Screenshots

List of individuals along with their affiliations

Adding organisations

Everything is available via the API, here an example of a search query for all international organisations in the DB.

Managing public keys and assigning them to users both for communication and validating signed information shared in the community

Dynamic model for creating new organisation structre

Requirements and installation

The platform is built on CakePHP 4 along with Bootstrap 4 and shares parts of the code-base with MISP.

The installation is documented at the following location INSTALL/INSTALL.md. For upgrades, look at INSTALL/UPGRADE.md

Hardware requirements:

A webserver with 4GB of memory and a single CPU core should be plenty for the current scope of Cerebrate. This might increase over the time with additional features being added, but the goal is to keep Cerebrate as lean as possible. Expect to have at least 40GB of disk space, depending on your log rotation strategy you might want to go higher.

For installation via docker, refer to the cerebrate-docker repo.

License

    The software is released under the AGPLv3.

    Copyright (C) 2019, 2021  Andras Iklody
    Copyright (C) 2020-2021 Sami Mokaddem
    Copyright (C) CIRCL - Computer Incident Response Center Luxembourg