Resilient Community Applications

These packages are installable components for the resilient-circuits framework.

Applications include,

rc-query-runner, a base for components that execute queries against another system and update the Resilient incident with search results. This includes a simple and powerful query definition file format.
Query-runner packages for searching QRadar, Splunk, LDAP, generic REST APIs, and more.
rc-webserver, a base for components that listen to incoming Web Service requests.
rc-cts, a simple Resilient Custom Threat Service
Custom Threat Service packages that implement several types of integration with third-party threat intelligence sources.
rc-shell-runner, a package for running shell scripts from Resilient rules.

Download the latest release packages here:

To install a package,

pip install <filename>.tar.gz

Refer to each package directory for pre-requisites and specific install instructions.

To list your installed packages,

resilient-circuits list

These packages are provided "as-is", without any support. Please report issues using the Issues tab on GitHub.

Contributions are welcome.

Name		Name	Last commit message	Last commit date
Latest commit History 336 Commits
fn_cisco_enforcement		fn_cisco_enforcement
fn_mcafee_epo		fn_mcafee_epo
fn_mcafee_opendxl		fn_mcafee_opendxl
fn_mcafee_tie		fn_mcafee_tie
fn_splunk_integration		fn_splunk_integration
rc-cts-abuseipdb		rc-cts-abuseipdb
rc-cts-googlesafebrowsing		rc-cts-googlesafebrowsing
rc-cts-haveibeenpwned		rc-cts-haveibeenpwned
rc-cts-mcafeetie		rc-cts-mcafeetie
rc-cts-misp		rc-cts-misp
rc-cts-shadowserver		rc-cts-shadowserver
rc-cts-yeti		rc-cts-yeti
rc-cts		rc-cts
rc-qradar-search		rc-qradar-search
rc-query-csv		rc-query-csv
rc-query-rest		rc-query-rest
rc-query-runner		rc-query-runner
rc-shell-runner		rc-shell-runner
rc-splunk-search		rc-splunk-search
rc-webserver		rc-webserver
.gitignore		.gitignore
.travis.yml		.travis.yml
LICENSE		LICENSE
README.md		README.md
build_packages.sh		build_packages.sh
pushrelease-public.sh		pushrelease-public.sh
pushrelease.sh		pushrelease.sh
run_tests.sh		run_tests.sh

Provide feedback