热门搜索:
intelowlproject/intelowl_nginx
intelowlproject
IntelOwl Nginx custom build
下载次数: 0状态：社区镜像维护者：intelowlproject仓库类型：镜像最近更新：1 个月前
让 AI 帮你使用轩辕镜像？ · 展开查看说明
如果你使用 DeepSeek、元宝 AI、Copilot、ChatGPT 等 AI 工具，协助配置轩辕镜像、编写 docker pull 命令、修改 Docker Compose 镜像地址、配置镜像加速、排查镜像拉取失败、分析报错日志等问题，请先让 AI 阅读并遵守轩辕镜像的规则文档。
只需在 AI 对话中先发送下面这句话即可：
请先完整阅读并严格遵守以下文档中的全部规则与要求：
https://xuanyuan.cloud/agents.md
在未充分阅读并理解该文档前，不要生成任何命令、配置、修改建议、故障排查方案或技术回答。后续所有输出都必须严格以该文档中的规范为最高优先级执行。查看 agents.md 用法指南与完整示范。国内用户首推 元宝 AI、DeepSeek 的深度思考模式，不推荐豆包 AI；Cursor 等编辑器可在对话 @ 该链接，或加入 User Rules。 若 AI 无法访问外链，可 打开说明文档 复制全文粘贴。文档会随站点更新，复制内容可能过期，建议定期检查。
 https://github.com/intelowlproject/IntelOwl/actions/workflows/codeql-analysis.yml/badge.svg](https://github.com/intelowlproject/IntelOwl/actions/workflows/codeql-analysis.yml) https://github.com/intelowlproject/IntelOwl/actions/workflows/dependency_review.yml/badge.svg](https://github.com/intelowlproject/IntelOwl/actions/workflows/dependency_review.yml) https://github.com/intelowlproject/IntelOwl/workflows/Build%20&%20Tests/badge.svg](https://github.com/intelowlproject/IntelOwl/actions)  .
- A Fully-fledged REST APIs written in Django and Python.
- An easy way to be integrated in your stack of security tools to automate common jobs usually performed, for instance, by SOC analysts manually. (Thanks to the official libraries https://github.com/intelowlproject/pyintelowl and https://github.com/intelowlproject/go-intelowl)
- A built-in GUI: provides features such as dashboard, visualizations of analysis data, easy to use forms for requesting new analysis, etc.
- A framework composed of modular components called Plugins:
- analyzers that can be run to either retrieve data from external sources (like VirusTotal or AbuseIPDB) or to generate intel from internally available tools (like Yara or Oletools)
- connectors that can be run to export data to external platforms (like MISP or OpenCTI)
- pivots that are designed to trigger the execution of a chain of analysis and connect them to each other
- visualizers that are designed to create custom visualizations of analyzers results in the GUI
- ingestors that allow to automatically ingest stream of observables or files to IntelOwl itself
- playbooks that are meant to make analysis easily repeatable
- data models to map the different data extracted from analyzers to a single common schema
- artifacts that are representations of observables or files that can be analyzed multiple times for different evaluations
- user events that allow users to add custom evaluation or additional info to any artifact
- A starting point for analysts' Investigations: users can register their findings, correlate the information found, and collaborate...all in a single place
Documentation
We try hard to keep our documentation well written, easy to understand and always updated. All info about installation, usage, configuration and contribution can be found https://intelowlproject.github.io/docs/
Publications and Media
To know more about the project and its growth over time, you may be interested in reading https://intelowlproject.github.io/docs/IntelOwl/introduction/#publications-and-media
Available services or analyzers
You can see the full list of all available analyzers in the https://intelowlproject.github.io/docs/IntelOwl/usage/#analyzers.
| Type | Analyzers Available |
|---|---|
| Inbuilt modules | - Static Office Document, RTF, PDF, PE, ELF, APK File Analysis and metadata extraction - Strings Deobfuscation and analysis (https://github.com/mandiant/flare-floss, https://github.com/mandiant/stringsifter, ...) - https://virustotal.github.io/yara/, ClamAV (a lot of public rules are available. You can also add your own rules) - PE Emulation with https://github.com/qilingframework/qiling and https://github.com/mandiant/speakeasy - PE Signature verification - PE Capabilities Extraction (https://github.com/mandiant/capa and https://github.com/owasp-dep-scan/blint) - Javascript Emulation (https://github.com/CapacitorSet/box-js) - Android Malware Analysis (https://github.com/quark-engine/quark-engine, https://github.com/androguard/androguard, https://github.com/MobSF/mobsfscan/, ...) - SPF and DMARC Validator - PCAP Analysis with https://github.com/OISF/suricata and https://github.com/CERT-Polska/hfinger - Honeyclients (https://github.com/buffer/thug, https://github.com/wkeeling/selenium-wire) - Scanners (https://github.com/CERN-CERT/WAD, https://github.com/projectdiscovery/nuclei, ...) - more... |
| External services | - Abuse.ch MalwareBazaar/URLhaus/Threatfox/YARAify - GreyNoise v2 - Intezer - VirusTotal v3 - Crowdsec - URLscan - Shodan - AlienVault OTX - Intelligence_X - MISP - many more.. |
Partnerships and ***
As open source project maintainers, we strongly rely on external support to get the resources and time to work on keeping the project alive, with a constant release of new features, bug fixes and general improvements.
Because of this, we joined Open Collective to obtain US and EU non-profit equal level status which allows the organization to receive and manage ***s transparently and with tax exemption. Please support IntelOwl and all the community.
Certego
Certego is a MDR (Managed Detection and Response) and Threat Intelligence Provider based in Italy.
IntelOwl was born out of Certego's Threat intelligence R&D division and is mostly maintained and updated thanks to them.
The Honeynet Project
The Honeynet Project is a non-profit organization working on creating open source cyber security tools and sharing knowledge about cyber threats.
Thanks to Honeynet, we are hosting a public demo of the application here. If you are interested, please contact a member of Honeynet or an IntelOwl maintainer to get access to the public service.
Google Summer of Code
Since its birth this project has been participating in the Google Summer of Code (GSoC)!
If you are interested in participating in the next Google Summer of Code, check all the info available in the https://github.com/intelowlproject/gsoc!
Docker
In 2021 IntelOwl joined the official Docker Open Source Program. This allows IntelOwl developers to easily manage Docker images and focus on writing the code. You may find the official IntelOwl Docker images https://hub.docker.com/search?q=intelowlproject.
DigitalOcean
intelowlproject/intelowl
intelowlproject
IntelOwl：大规模管理威胁情报
13 次收藏10万+ 次下载
1 个月前更新
intelowlproject/intelowl_malware_tools_analyzers
intelowlproject
IntelOwl集成Capa、Floss、Qiling等恶意软件分析工具的Docker镜像，用于恶意软件分析。
1万+ 次下载
1 个月前更新
intelowlproject/greedybear
intelowlproject
GreedyBear是一个威胁情报平台，从T-POT蜜罐或其集群中提取攻击检测数据，生成可用于预防和检测攻击的威胁情报feeds，并提供可查询的API服务以获取 observables（域名或IP地址）信息。
1万+ 次下载
19 天前更新
intelowlproject/greedybear_nginx
intelowlproject
GreedyBear是一个威胁情报平台，从T-POT或其集群提取攻击数据，生成可用于防御和检测攻击的威胁情报feed，并提供查询可观测对象（域名或IP地址）信息的API服务。
1万+ 次下载
19 天前更新
intelowlproject/intelowl_pcap_analyzers
intelowlproject
Intel Owl是一个开源威胁情报管理解决方案，集成多种在线分析器和恶意软件分析工具，通过单一API请求从多源获取威胁情报，支持文件及可观察对象（IP、域名等）的情报丰富，提供REST API和内置GUI，适用于安全自动化和SOC分析。
1万+ 次下载
1 个月前更新
intelowlproject/intelowl_phishing_analyzers
intelowlproject
IntelOwl是一个开源威胁情报管理解决方案，集成多种分析器，支持文件及IP、域名、URL等可观察对象的威胁情报丰富，提供REST API和GUI，加速威胁情报检索与自动化分析。
1万+ 次下载
1 个月前更新
镜像拉取常见问题
功能
错误码
用户好评
来自真实用户的反馈，见证轩辕镜像的优质服务
oldzhang
运维工程师
Linux服务器
5
"Docker访问体验非常流畅，大镜像也能快速完成下载。"