DEPRECATED - MozDef: Mozilla Enterprise Defense Platform
Перейти к файлу
Zack Mullaly 01093c2340 Resolved merge conflict 2018-10-17 16:04:18 -07:00
.github Update ISSUE_TEMPLATE.md 2017-06-15 15:05:44 -05:00
alerts Fixed some broken imports 2018-10-17 16:03:00 -07:00
benchmarking Merge remote-tracking branch 'origin/master' into fix_pep8_errors 2018-10-08 16:20:32 -04:00
bot Replace all the imports to use mozdef_util 2018-10-16 12:45:04 -07:00
cloudy_mozdef update the repo before build (mainly for sprint iterations) 2018-10-17 14:57:22 -07:00
config Removing delay compress so nagios stops complaining on old events 2018-10-10 09:25:01 -05:00
cron Replace all the imports to use mozdef_util 2018-10-16 12:45:04 -07:00
docker Merge pull request #810 from andrewkrug/config_system 2018-10-17 15:44:46 -07:00
docs add cloud deployment page stub and arch diagram 2018-10-16 09:36:34 -07:00
examples Replace all the imports to use mozdef_util 2018-10-16 12:45:04 -07:00
lib Moving everything from lib into a package created with cookiecutter 2018-10-16 09:14:18 -07:00
loginput Fixup inline comments 2018-10-05 18:02:04 -04:00
meteor ditch zilla, navtab color 2018-10-16 14:01:03 -07:00
mozdef_util Update release version 2018-10-17 13:05:35 -07:00
mq Fixed some broken imports 2018-10-17 16:03:00 -07:00
rest Replace all the imports to use mozdef_util 2018-10-16 12:45:04 -07:00
static Remove heatmap html page 2017-06-15 15:07:42 -05:00
systemdfiles Naming Convention and Logging Changes. 2017-10-04 15:59:49 -05:00
tests Change all files to be compose 2.2 compliant (its either that or all 3.0 2018-10-17 14:33:13 -07:00
.flake8 Merge remote-tracking branch 'origin/master' into fix_pep8_errors 2018-10-08 16:20:32 -04:00
.gitignore update ignore 2018-10-01 10:28:37 -07:00
.travis.yml default to not pulling images because i don't want pwnbus to kill me :) 2018-10-16 15:00:40 -07:00
CONTRIBUTING.md Modifying urls to point to mozilla from jeffbryner, slight readability changes. 2017-06-15 15:07:30 -05:00
LICENSE Updated license file to conform with MPL 2014-02-25 09:55:02 -08:00
Makefile do not use the norebuild system for cloudymozdef 2018-10-17 15:40:43 -07:00
README.md Update readme to remove references to banhammer 2018-10-04 12:20:10 -04:00
requirements.txt Fixed some broken imports 2018-10-17 16:03:00 -07:00

README.md

Build Status Documentation Status

MozDef: The Mozilla Defense Platform

Why?

The inspiration for MozDef comes from the large arsenal of tools available to attackers. Suites like metasploit, armitage, lair, dradis and others are readily available to help attackers coordinate, share intelligence and finely tune their attacks in real time. Defenders are usually limited to wikis, ticketing systems and manual tracking databases attached to the end of a Security Information Event Management (SIEM) system.

The Mozilla Defense Platform (MozDef) seeks to automate the security incident handling process and facilitate the real-time activities of incident handlers.

Goals:

  • Provide a platform for use by defenders to rapidly discover and respond to security incidents.
  • Automate interfaces to other systems like bunker, cymon, mig
  • Provide metrics for security events and incidents
  • Facilitate real-time collaboration amongst incident handlers
  • Facilitate repeatable, predictable processes for incident handling
  • Go beyond traditional SIEM systems in automating incident handling, information sharing, workflow, metrics and response automation

Status:

MozDef is in production at Mozilla where we are using it to process over 300 million events per day.

DOCS:

http://mozdef.readthedocs.org/en/latest/