/YetiToElastic

YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack

Primary LanguagePythonMIT LicenseMIT

YetiToElastic

YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack.

Additional Information in enSilo's BreakingMalware Blog.

Usage Example:

Bash:

python3 yeti_to_elasticsearch.py "HOSTNAME/IP" --elastic_index="yeti-index" --elastic_use_ssl

Python:

from yeti_to_elasticsearch import YetiFeedSender, set_logging

set_logging()
sender = YetiFeedSender("yeti-feeds", excluded_feeds=("AsproxTracker"),
                        elastic_hostname="="<elasticsearch hostname>",
                        elastic_port=<elasticsearch port>)
sender.extract_and_send()