cwatch 0.0.5

Monitors and generates a report for changes in reports from Cyberbro

cwatch

A simple tool to regurarly run queries against cyberbro and generate a report.

Configuration

Create a directory where you like to store your configuration and database. Create a configuration file named cwatch.toml in that directory, an example is available below.

[iocs]
domains = [ "example.com", "example.net" ]

[cyberbro]
url = "http://127.0.0.1:5000"
engines = ["reverse_dns", "rdap", "ipquery", "abuseipdb", "ipinfo", "virustotal", "spur", "google_safe_browsing", "shodan", "phishtank", "threatfox", "urlscan", "google", "github", "ioc_one_html", "ioc_one_pdf", "abusix"]

[osint]
header = "Report for example.com"
footer = ""
ignore_engines = ["$delete", "reverse_dns", "ipquery", "ipinfo", "urlscan", "spur" ]
report = true
simple = false
verbose = false
DB_FILE = "cwatch.db"

Change domains to the domains (or hosts) you like to monitor.

Install

Run the following in the directory where you have placed cwatch.toml.

uv venv
uv pip install cwatch
uv run cwatch