These packages are installable components for the resilient-circuits framework.
Applications include,
rc-query-runner, a base for components that execute queries against another system and update the Resilient incident with search results. This includes a simple and powerful query definition file format.- Query-runner packages for searching QRadar, Splunk, LDAP, generic REST APIs, and more.
rc-webserver, a base for components that listen to incoming Web Service requests.rc-cts, a simple Resilient Custom Threat Service- Custom Threat Service packages that implement several types of integration with third-party threat intelligence sources.
rc-shell-runner, a package for running shell scripts from Resilient rules.
Download the latest release packages here:
To install a package,
pip install <filename>.tar.gzRefer to each package directory for pre-requisites and specific install instructions.
To list your installed packages,
resilient-circuits listThese packages are provided "as-is", without any support. Please report issues using the Issues tab on GitHub.
Contributions are welcome.