Friday, 28 September 2018

PatrOwl - Open Source and Free solution for orchestrating Security Operations

About PatrOwl
   PatrOwl is an advanced platform for orchestrating Security Operations like Penetration testing, Vulnerability Assessment, Code review, Compliance checks, Cyber-Threat Intelligence / Hunting and SOC & DFIR Operations.

   Fully-Developped in Python (Django for the backend and Flask for the engines). It remains incredibly easy to customize all components. Asynchronous tasks and engine scalability are supported by RabbitMQ and Celery.

   PatrOwl is a scalable, free and open-source solution for orchestrating Security Operations.
PatrowlManager is the Front-end application for managing the assets, reviewing risks on real-time, orchestrating the operations (scans, searches, API calls, ...), aggregating the results, relaying alerts on third parties (ex: Incident Response platform like TheHive, Splunk, ...) and providing the reports and dashboards. Operations are performed by the PatrowlEngines instances. Don't forget to install and deploy them ;).

PatrOwl Project pitch desk

Architecture about PatrOwl
   Fully-Developed in Python, PatrOwl is composed of a Front-end application PatrowlManager (Django) communicating with one or multiple PatrowlEngines micro-applications (Flask) which perform the scans, analyze the results and format them in a normalized way. It remains incredibly easy to customize all components. Asynchronous tasks and engine scalability are supported by RabbitMQ and Celery.
   The PatrowlManager application is reachable using the embedded WEB interface or using the JSON-API. PatrowlEngines are only available through generic JSON-API calls (see Documentation).

Install PatrOwl on Debian:
sudo su
apt install build-essential python2.7-dev curl rabbitmq-server postgresql
pip install virtualenv
git clone https://github.com/Patrowl/PatrowlManager
cd PatrowlManager
pip install -r requirements.txt

   If you want more information or want install Patrowl on another platform, you can read the Installation Guide and the User Guide.

Hardware Pre-requisites for PatrOwl
   PatrOwlManager uses PosgreSQL to store data. We recommend using a virtual machine with at least 4vCPU, 8 GB of RAM and 60 GB of disk. You can also use a physical machine with similar specifications.

License of PatrOwl
   PatrOwl is an open source and free software released under the AGPL (Affero General Public License). We are committed to ensure that PatrOwl will remain a free and open source project on the long-run.

Updates: Information, news and updates are regularly posted on @Patrowl_io and on the PatrOwl blog.

Contributing
   Please see our Code of conduct. We welcome your contributions. Please feel free to fork the code, play with it, make some patches and send us pull requests via issues.

Support for PatrOwl
   Please open an issue on GitHub if you'd like to report a bug or request a feature. We are also available on Gitter to help you out.

   If you need to contact the project team, send an email to getsupport@patrowl.io.

Copyright about PatrOwl
   Copyright (C) 2018 Nicolas MATTIOCCO
   Twitter: @MaKyOtOx
   Email: nicolas@greenlock.fr

And have something to say about GitHackTools or PatrOwl? Comment below or share this post from GitHackTools FacebookGitHackTools Twitter and GitHackTools Google Plus.

Screenshots of PatrOwlManager

 

No comments:

Post a Comment