🔮 CassandraCTI

Modular Cyber Threat Intelligence Aggregator.
From RSS feeds to actionable threat intel - automatically distributed across your platforms.

📜 Table of Contents

Click to collapse/expand

1. 📖 About
2. 🚀 Getting Started
3. 🛠️ Usage
4. 📜 License
5. 📞 Contact

📖 About

CassandraCTI is a modular Cyber Threat Intelligence (CTI) aggregator designed to collect and distribute cyber intelligence from RSS feeds across multiple platforms.

Originally developed as a private tool for internal corporate needs, CassandraCTI is now being restructured and released as an open-source, community-friendly project. While it was built for very specific workflows, it is now being redesigned to be modular, flexible, and adaptable to other use cases.

⚙️ Note: This project is still under active development and restructuring.

🚀 Getting Started

Installation

pip install -r requirements.txt

Initialization

Create default configuration files in %APPDATA%\cassandra-cti\ (Windows) or ~/.config/cassandra-cti/ (Linux/Mac).

python -m cassandra_cti.cli init

🛠️ Usage

Running the Bot

One-shot run:

python -m cassandra_cti.cli run

Loop mode (every 5 minutes):

python -m cassandra_cti.cli run --loop

Filter by source:

python -m cassandra_cti.cli run --sources "rss,ransomware_live"

Backfill (process past events):

python -m cassandra_cti.cli run --since 2025-11-25

Dry Run (no messages sent):

python -m cassandra_cti.cli run --dry-run

Database Management

Reset database (clear history):

python -m cassandra_cti.cli db-reset

Clear "seen" history for a source:

python -m cassandra_cti.cli seen-clear --source-prefix "rss:LeMondeInformatique"

Configuration & Debug

Check configuration:

python -m cassandra_cti.cli doctor config

Test a connector:

python -m cassandra_cti.cli doctor connector --id my-discord-connector

List current config:

python -m cassandra_cti.cli list

Managing Feeds & Connectors

Add RSS Feed:

python -m cassandra_cti.cli add-source rss --name "CERT-FR" --url "https://cert.ssi.gouv.fr/feed/"

Bulk Import RSS Feeds (CSV):

python -m cassandra_cti.cli import-feeds my_feeds.csv

Add Teams Connector:

python -m cassandra_cti.cli add-connector --id "teams-soc" --webhook-url "https://..."

📚 License

This project is licensed under the GNU Affero General Public License, Version 3.0. For more details, please refer to the LICENSE file in the repository: Read the license on GitHub

(🔼 Back to top)

📞 Contact

(🔼 Back to top)