Kali Linux

Odin : Central IoC Scanner Based On Loki

Odin is a central IoC scanner based on Loki.

General Info

This application Loki latest version and download it on all machines using a powershell script and run it then this app receives the respose from all machines and parse the feed in CSV form.

Requirements

  • Python +3.5
  • PyQT5
  • psutil
  • pyparsing
  • zipfile

Fetch

Odin download and extract the latest version on Loki and start HTTP server to deliver the executable (Loki) to all machines.

Deploy Loki

This step has ti be done manually using powershell script on a DC machine or suing domain admin account which the script deliver loki to all machines and start updating. The script is in Configurations tab and you can modiy the scipt as needed.

Collecting

Start the listener then from the powershell script start Loki to search for IoCs and results will be sent from Loki to Odin

Parsing

Collected logs will be parsed and can be exported as CSV file to be handled with something else like ELK.

R K

Recent Posts

Vermilion : Mastering Linux Post-Exploitation For Red Team Success

Vermilion is a simple and lightweight CLI tool designed for rapid collection, and optional exfiltration…

1 day ago

AD-CS-Forest-Exploiter : Mastering Security Through PowerShell For AD CS Misconfiguration

ADCFFS is a PowerShell script that can be used to exploit the AD CS container…

1 day ago

Usage Of Tartufo – A Comprehensive Guide To Securing Your Git Repositories

Tartufo will, by default, scan the entire history of a git repository for any text…

1 day ago

Loco : A Rails-Inspired Framework For Rust Developers

Loco is strongly inspired by Rails. If you know Rails and Rust, you'll feel at…

2 days ago

Monolith : The Ultimate Tool For Storing Entire Web Pages As Single HTML Files

A data hoarder’s dream come true: bundle any web page into a single HTML file.…

2 days ago