Generic SIEM engine detector
Project description
Clickdetect
Clickdetect is a SIEM engine on steroids, no lock-in with any vendors and powerfull detection.
Follow the doc: https://clickdetect.souzo.me
Starting guide
First of all, create your runner.yml file. (Follow doc for the creation) You will put detectors, webhooks and datasources in the configuration file.
uv
Follow uv installation in https://docs.astral.sh/uv
uv sync --no-dev
uv run clickdetect --api
Docker/Podman
Local
podman build -t clickdetect .
podman run -v ./runner.yml:/app/runner.yml -p 8080 clickdetect --api -p 8080
Github Packages
podman run -v ./runner.yml:/app/runner.yml -p 8080 ghcr.io/clicksiem/clickdetect:latest --api -p 8080
Next steps
- Add minimal 10 webhooks []
- Implement timeframe []
- Group Alerts
- Silence alerts
- Add silence alerts endpoint for api []
- Add sigma convertion in rules []
- like: sigma: true
- Hot reload for rules []
- add option like --reload
- Add api endpoint to add/remove/update new rules []
- file hot reload will make this possible
Contact-me
- E-mail: me@souzo.me
- Matrix: @souzo:matrix.org
- Linkedin: https://www.linkedin.com/in/vinicius-f-a76ba51b5/
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file clickdetect-1.0.0.tar.gz.
File metadata
- Download URL: clickdetect-1.0.0.tar.gz
- Upload date:
- Size: 15.1 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: uv/0.10.12 {"installer":{"name":"uv","version":"0.10.12","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
5f66caff669ed002c2e7da9f1b80a5213b6d23ecea59e0b26d0b1b8cc0fac71f
|
|
| MD5 |
da8a28942f4e8e06e58a2e63daf72bbd
|
|
| BLAKE2b-256 |
78c2c1f06eb0f4bc657c1c41b5278fed73e686b53167280d9a48e26a277446eb
|
File details
Details for the file clickdetect-1.0.0-py3-none-any.whl.
File metadata
- Download URL: clickdetect-1.0.0-py3-none-any.whl
- Upload date:
- Size: 26.3 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: uv/0.10.12 {"installer":{"name":"uv","version":"0.10.12","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
10f2336018dcbde64b8bea9ab4aea0893868889539de239eee9a33a128fec1b5
|
|
| MD5 |
437bcfaebec1adbd8dd6490334cd0a15
|
|
| BLAKE2b-256 |
0d765764118cbc2acea1dd414136bed24a30d1c7e7f62b6a2e4755abac559dab
|
