opensourcesec / malstrom

Cyber Intel Management

Cyber Intelligence Management Platform

Malstrom aims to be a repository for threat tracking and forensic artifacts, but also stores YARA rules and notes for investigation

Dashboard

Malware Samples

Malware File Details

Threat Tag Cloud

IOC Extraction and Storage

YARA Rule Storage

Installation

• Clone repository
• Edit app/assets/vt.key and input your VirusTotal API key as the only line in the file
• cd into project directory and run 'bundle install'
• setup the database.yml config file for your chosen DB
• Type 'rake db:migrate' to run database migrations
• Run RAILS_ENV=production bundle exec rake assets:precompile to precompile assets
• Finally, run the server with the command 'rails server -e production'