c_meyer/KasperskyLab-TinyCheck
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
Félix Aimé 2020-11-25 17:29:59 +01:00 committed by GitHub
parent 84fc717cc6
commit 6aaec9c5cf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
README.md
View File

@ -125,13 +125,20 @@ In order to keep IOCs and whitelist updated constantly, TinyCheck integrates som
If you have seen something very suspicious and/or needs to be investigated/integrated in one of these two lists, don't hesitate to ping us. You can also do you own watcher. Remember, sharing is caring. If you have seen something very suspicious and/or needs to be investigated/integrated in one of these two lists, don't hesitate to ping us. You can also do you own watcher. Remember, sharing is caring.
### Q&A with the developper
**Your project seem very cool, does it send data to Kaspersky or any telemetry server?**<br />
No, at all. You can look to the sources, the only data sent by TinyCheck is an HTTP GET request to a website that you can specify in the config, as well as the watchers URLs. Kaspersky don't - and will not - receive any telemetry from your TinyCheck device.<br /><br />
**I'm not very confortable with the concept of "watchers" as the IOCs downloaded are public. Do you plan to develop a server to centralize AMBER/RED IOCs?**<br />
Yes, if the demand is felt by NGOs (contact us!). Is it possible to develop this kind of thing, allowing you to centralize your IOCs and managing your fleet of TinyCheck instances. The server can also embed better detection rules thanks to the telemetry that it will receive.<br /><br /><br />
### Possible updates for next releases ### Possible updates for next releases
- Centralized server for IOC/whitelist management (aka. Remote Analysis). - Centralized server for IOC/whitelist management (aka. Remote Analysis).
- Possibility to add watchers from the backend interface. - Possibility to add watchers from the backend interface.
- Encryption of ZIPed reports. - Encryption of ZIPed reports.
- Better frontend GUI/JS (use of websockets / better animations). - Better frontend GUI/JS (use of websockets / better animations).
- More OpSec (TOR integration, IP randomization etc.) - More OpSec (TOR integration, Local IP randomization etc.)
- 3d template for kiosks ? - 3d template for kiosks ?
### Special thanks ### Special thanks