Fushin

A malicious blog posts monitoring tool.

• Subscribe a malicious blog posts feed (by @catnap707)
• Extract IoCs(BTC, URL) from a blog post
• Post extracted IoCs to Slack (or STDOUT) with enrichment
• Attachment handling
  • Scan a URL on Hybrid Analysis

• jugem.jp
• kikey.net
• sblo.jp
• seesaa.net
• shinobi.jp
• teacup.com

gem install fushin

Please set the following environment variables:

• SLACK_WEBHOOK_URL: Slack Webhook URL
• SLACK_CHANNEL: Slack channel name
• HA_API_KEY: Hybrid Analysis API key

fushin