intelowlproject/intelowl_nginx Docker 镜像 - 轩辕镜像 | Docker 镜像高效稳定拉取服务
intelowlproject/intelowl_nginxintelowlproject
IntelOwl Nginx custom build
下载次数: 0状态：社区镜像维护者：intelowlproject仓库类型：镜像最近更新：1 天前
.
- A Fully-fledged REST APIs written in Django and Python.
- An easy way to be integrated in your stack of security tools to automate common jobs usually performed, for instance, by SOC analysts manually. (Thanks to the official libraries pyintelowl and go-intelowl)
- A built-in GUI: provides features such as dashboard, visualizations of analysis data, easy to use forms for requesting new analysis, etc.
- A framework composed of modular components called Plugins:
- analyzers that can be run to either retrieve data from external sources (like VirusTotal or AbuseIPDB) or to generate intel from internally available tools (like Yara or Oletools)
- connectors that can be run to export data to external platforms (like MISP or OpenCTI)
- pivots that are designed to trigger the execution of a chain of analysis and connect them to each other
- visualizers that are designed to create custom visualizations of analyzers results in the GUI
- ingestors that allow to automatically ingest stream of observables or files to IntelOwl itself
- playbooks that are meant to make analysis easily repeatable
- data models to map the different data extracted from analyzers to a single common schema
- artifacts that are representations of observables or files that can be analyzed multiple times for different evaluations
- user events that allow users to add custom evaluation or additional info to any artifact
- A starting point for analysts' Investigations: users can register their findings, correlate the information found, and collaborate...all in a single place
Documentation
We try hard to keep our documentation well written, easy to understand and always updated. All info about installation, usage, configuration and contribution can be found here
Publications and Media
To know more about the project and its growth over time, you may be interested in reading the official blog posts and/or videos about the project by clicking on this link
Available services or analyzers
You can see the full list of all available analyzers in the documentation.
| Type | Analyzers Available |
|---|---|
| Inbuilt modules | - Static Office Document, RTF, PDF, PE, ELF, APK File Analysis and metadata extraction - Strings Deobfuscation and analysis (FLOSS, Stringsifter, ...) - Yara, ClamAV (a lot of public rules are available. You can also add your own rules) - PE Emulation with Qiling and Speakeasy - PE Signature verification - PE Capabilities Extraction (CAPA and Blint) - Javascript Emulation (Box-js) - Android Malware Analysis (Quark-Engine, Androguard, Mobsf, ...) - SPF and DMARC Validator - PCAP Analysis with Suricata and Hfinger - Honeyclients (Thug, Selenium) - Scanners (WAD, Nuclei, ...) - more... |
| External services | - Abuse.ch MalwareBazaar/URLhaus/Threatfox/YARAify - GreyNoise v2 - Intezer - VirusTotal v3 - Crowdsec - URLscan - Shodan - AlienVault OTX - Intelligence_X - MISP - many more.. |
Partnerships and ***
As open source project maintainers, we strongly rely on external support to get the resources and time to work on keeping the project alive, with a constant release of new features, bug fixes and general improvements.
Because of this, we joined Open Collective to obtain US and EU non-profit equal level status which allows the organization to receive and manage ***s transparently and with tax exemption. Please support IntelOwl and all the community by choosing a plan (BRONZE, SILVER, etc).
Certego
Certego is a MDR (Managed Detection and Response) and Threat Intelligence Provider based in Italy.
IntelOwl was born out of Certego's Threat intelligence R&D division and is mostly maintained and updated thanks to them.
The Honeynet Project
The Honeynet Project is a non-profit organization working on creating open source cyber security tools and sharing knowledge about cyber threats.
Thanks to Honeynet, we are hosting a public demo of the application here. If you are interested, please contact a member of Honeynet or an IntelOwl maintainer to get access to the public service.
Google Summer of Code
Since its birth this project has been participating in the Google Summer of Code (GSoC)!
If you are interested in participating in the next Google Summer of Code, check all the info available in the dedicated repository!
Docker
In 2021 IntelOwl joined the official Docker Open Source Program. This allows IntelOwl developers to easily manage Docker images and focus on writing the code. You may find the official IntelOwl Docker images here.
DigitalOcean
intelowlproject/intelowl
intelowlproject
IntelOwl：大规模管理威胁情报
13 次收藏10万+ 次下载
15 天前更新
intelowlproject/intelowl_pcap_analyzers
intelowlproject
Intel Owl是一个开源威胁情报管理解决方案，集成多种在线分析器和恶意软件分析工具，通过单一API请求从多源获取威胁情报，支持文件及可观察对象（IP、域名等）的情报丰富，提供REST API和内置GUI，适用于安全自动化和SOC分析。
1万+ 次下载
15 天前更新
intelowlproject/intelowl_malware_tools_analyzers
intelowlproject
IntelOwl集成Capa、Floss、Qiling等恶意软件分析工具的Docker镜像，用于恶意软件分析。
1万+ 次下载
15 天前更新
intelowlproject/greedybear_nginx
intelowlproject
GreedyBear是一个威胁情报平台，从T-POT或其集群提取攻击数据，生成可用于防御和检测攻击的威胁情报feed，并提供查询可观测对象（域名或IP地址）信息的API服务。
1万+ 次下载
14 天前更新
intelowlproject/intelowl_phishing_analyzers
intelowlproject
IntelOwl是一个开源威胁情报管理解决方案，集成多种分析器，支持文件及IP、域名、URL等可观察对象的威胁情报丰富，提供REST API和GUI，加速威胁情报检索与自动化分析。
1万+ 次下载
15 天前更新
intelowlproject/greedybear
intelowlproject
GreedyBear是一个威胁情报平台，从T-POT蜜罐或其集群中提取攻击检测数据，生成可用于预防和检测攻击的威胁情报feeds，并提供可查询的API服务以获取 observables（域名或IP地址）信息。
1万+ 次下载
14 天前更新
镜像拉取常见问题
使用与功能问题
错误码与失败问题
manifest unknown 错误：镜像不存在或标签错误
manifest unknown 错误
TLS/SSL 证书验证失败：Docker pull 时 HTTPS 证书错误
TLS 证书验证失败
DNS 解析超时：无法解析镜像仓库地址或连接超时
DNS 解析超时
410 Gone 错误：Docker 版本过低导致协议不兼容
410 错误：版本过低
402 Payment Required 错误：流量耗尽错误提示
402 错误：流量耗尽
401 UNAUTHORIZED 错误：身份认证失败或登录信息错误
身份认证失败错误
429 Too Many Requests 错误：请求频率超出专业版限制
429 限流错误
Docker login 凭证保存错误：Cannot autolaunch D-Bus（不影响登录）
凭证保存错误
账号 / 计费 / 权限
用户好评
来自真实用户的反馈，见证轩辕镜像的优质服务
oldzhang
运维工程师
Linux服务器
5
"Docker访问体验非常流畅，大镜像也能快速完成下载。"