Trigger Alarm to see Threat Intel Enriched Data about dsiem HOT 3 OPEN

Hi, by default we only support threat intel integration with Moloch Wise (https://github.com/aol/moloch/wiki/WISE). Moloch WIse is a threat intel aggregator supporting various sources (including Alienvault OTX) built for Moloch, but it can be used as a standalone system as well.

So you will need to install Moloch Wise first and configure it to use Alienvault OTX (supplying your OTX key in the Wise's config file). I have a Docker version of Wise here https://github.com/mmta/docker-wise.

Or alternatively, to see all the integration working right out of the box, you can try the Dsiem demo environment first here https://github.com/defenxor/dsiem/tree/master/demo.

from dsiem.

@mmta hi bro
can i use the demo directly in reel environment with new source if yes ! what kind of configuration i should do

from dsiem.

You can use the demo to learn more about the architecture and perhaps copy some of its configuration, but I would advise against using it on a real environment.

from dsiem.