FlowIntel CM is an open-source platform designed to assist analysts in organizing their cases and tasks. It features a range of tools and functionalities to enhance workflow efficiency.
- Case and Task Management: Tailored for security analysts, enabling efficient tracking and organization.
- Rich Documentation Tools: Includes Markdown and Mermaid integration for detailed notes, with export options like PDF.
- Integration with MISP standard: Seamless connection with MISP taxonomies and MISP galaxy.
- Calendar and Notifications: Features an efficient calendar view and notifications for timely task management.
- Templating System: Provides templates for cases and tasks, creating a playbook and process repository for cybersecurity.
- Flexible Data Export: Offers modules for exporting data to platforms like MISP, AIL, and more.
- Accessible API: Exposes an API for easy interaction with FlowIntel CM's functionalities.
Change the configuration /conf/config.py
run the installation script ./install.sh
Start the application with ./launch.sh -l
-
email:
[email protected]
-
password:
admin
Analyzers receive data from Flowintel-cm and can send data to flowintel-cm to enrich notes of cases or tasks.
Connectors can only receive data from Flowintel-cm. In the case of MISP, this will result in the creation of an event with a flowintel-cm-case object for a case and a flowintel-cm-task object for a task.
A screen is created to notify recurrent case. To access it:
screen -r fcm
Import a case and its tasks:
{
"title": "Super Case",
"description": "My super case for the documentation",
"uuid": "0b1f9a85-0d38-46a1-b9dd-1eeea1608308",
"deadline": null,
"recurring_date": null,
"recurring_type": null,
"tasks": [
{
"title": "Prepare a super tea",
"description": "Keep it as hot as possible",
"uuid": "ddd271b4-d7f8-4af0-a9b3-46ad52aca1bf",
"notes": "# Preparation\n- add one sugar\n",
"url": "",
"deadline": null
}
]
}
/api/case/doc
/api/admin/doc
/api/template/doc
/api/importer/doc
This software is licensed under GNU Affero General Public License version 3
Copyright (C) 2022-2023 CIRCL - Computer Incident Response Center Luxembourg
Copyright (C) 2022-2023 David Cruciani