chronos-security 1.1.0

Unified Security Fusion Platform - Threat Intelligence, Vulnerability Management, IR Playbooks

CHRONOS Security - Unified Security Fusion Platform

CHRONOS is a comprehensive security fusion platform that integrates threat intelligence, vulnerability management, phishing detection, log analysis, reporting, and incident response capabilities into a unified CLI tool.

🚀 Features

🔬 Threat Intelligence

• EPSS Integration - Exploit prediction scoring from FIRST
• NVD CVE Database - National Vulnerability Database queries
• CISA KEV - Known Exploited Vulnerabilities tracking
• URLhaus - Malicious URL reputation checking
• VirusTotal - File hash and URL analysis

🔓 Vulnerability Management

• Multi-Format Import - SARIF, Trivy, Grype, Bandit support
• Smart Prioritization - CVSS + EPSS + KEV-based scoring
• Auto-Enrichment - Automatic threat intel correlation

🎣 Phishing Detection

• Email Analysis - SPF, DKIM, DMARC validation
• URL Reputation - Real-time malicious URL detection
• Brand Impersonation - Detect spoofing attempts

📜 Log Analysis

• Multi-Format Parsers - Syslog, Auth, CloudTrail, Nginx, JSON
• ML Anomaly Detection - IsolationForest-based anomalies
• Baseline Creation - Normal behavior profiling

📊 Report Generation

• Multiple Formats - HTML, Markdown, JSON
• Audience Targeting - Technical, Management, Audit templates
• Charts & Graphs - Matplotlib visualizations

🚨 Incident Response

• YAML Playbooks - Codified response procedures
• Dry-Run Default - Safe testing before execution
• Built-in Playbooks - Malware, phishing, brute force responses

📦 Installation

pip install chronos-security

🎯 Quick Start

# Check system status
chronos status
chronos doctor

# Threat intelligence
chronos intel cve CVE-2023-44487
chronos intel url https://suspicious-site.com
chronos intel kev --days 7

# Vulnerability management
chronos vuln import trivy-results.json
chronos vuln prioritize scan.json --top 20

# Phishing analysis
chronos phish analyze suspicious.eml
chronos phish batch ./emails/

# Log analysis
chronos logs analyze server.log --ml
chronos logs baseline access.log

# Reports
chronos report generate report.html
chronos report summary --days 30

# Incident response
chronos ir list
chronos ir run malware_response --dry-run

🔧 Configuration

Create ~/.chronos/config.toml:

[api_keys]
nvd_key = "your-nvd-api-key"
virustotal_key = "your-vt-api-key"

[intel]
cache_ttl_hours = 24

[ir]
dry_run_default = true

Or use environment variables:

export CHRONOS_VIRUSTOTAL_KEY="your-key"
export CHRONOS_NVD_KEY="your-key"

📚 Documentation

Core commands:

• detect - Scan for security threats
• analyze - Analyze vulnerabilities
• defend - Defensive measures
• intel - Threat intelligence
• vuln - Vulnerability management
• phish - Phishing detection
• logs - Log analysis
• report - Report generation
• ir - Incident response

Run chronos <command> --help for detailed usage.

🤝 Contributing

Contributions welcome! See CONTRIBUTING.md for guidelines.

📄 License

MIT License - see LICENSE file.