# Nethive Project | Restructured And Collaborated SIEM And CVSS Infrastructure

**URL:** <https://onehack.st/t/nethive-project-restructured-and-collaborated-siem-and-cvss-infrastructure/188238>\
**Category:** Tools & Scripts\
**Tags:** learning, tools\
**Created:** [June 7, 2021, 11:17am UTC](https://onehack.st/t/nethive-project-restructured-and-collaborated-siem-and-cvss-infrastructure/188238 "2021-06-07T11:17:12Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![PlayBoy83](https://onehack.st/user_avatar/onehack.st/playboy83/32/164314_2.png) [@PlayBoy83](https://onehack.st/u/PlayBoy83)\
**Post date:** [June 7, 2021, 11:17am UTC](https://onehack.st/t/nethive-project-restructured-and-collaborated-siem-and-cvss-infrastructure/188238/1 "2021-06-07T11:17:12Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/d/6/d65225598eb1b196a7776cd428c9e41af62d7ba9.png)

#### Zero to Low Latency Monitoring System

[Features](https://github.com/chrisandoryan/Nethive-Project#features) • [Installation](https://github.com/chrisandoryan/Nethive-Project#installation) • [Quick Start](https://github.com/chrisandoryan/Nethive-Project#quick-start) • [Contributors](https://github.com/chrisandoryan/Nethive-Project#contributors) • [User Guide](https://github.com/chrisandoryan/Nethive-Project/blob/master/doc/user_guide.md)

**The Nethive Project** provides a Security Information and Event Management (SIEM) insfrastructure empowered by **CVSS** automatic measurements.

[![Dashboard Preview](https://github.com/chrisandoryan/Nethive-Project/raw/master/graphics/dashboard.png)](https://github.com/chrisandoryan/Nethive-Project/blob/master/graphics/dashboard.png)

## Features

- Machine Learning powered SQL Injection Detection
- Server-side XSS Detection based on Chrome’s XSS Auditor
- Post-exploitation Detection powered by Auditbeat
- Bash Command History Tracker
- CVSS Measurement on Detected Attacks
- Realtime Log Storing powered by Elasticsearch and Logstash
- Basic System Monitoring
- Resourceful Dashboard UI
- Notify Suspicious Activity via Email

## Installation

Before installing, please make sure to install the **[pre-requisites](https://github.com/chrisandoryan/Nethive-Project/blob/master/doc/user_guide.md#pre-requisites)**.

You can install Nethive from PyPi package manager using the following command:

[Coming Soon!]

**or**

You can install Nethive using the latest repository:

```auto
$ git clone https://github.com/chrisandoryan/Nethive-Project.git
$ cd Nethive-Project/
$ sudo bash install.sh
$ sudo pip3 install -r requirements.txt

```

Please make sure all dependencies are installed if anyone of the above fails. For more detailed information, refer to the [installation guide](https://github.com/chrisandoryan/Nethive-Project/blob/master/doc/user_guide.md).

## Quick Start

[![Start Nethive](https://github.com/chrisandoryan/Nethive-Project/raw/master/graphics/start-nethive.gif)](https://github.com/chrisandoryan/Nethive-Project/blob/master/graphics/start-nethive.gif)

1. Fetch and start **nethive-cvss** docker container

```auto
$ git clone https://github.com/Falanteris/docker-nethive-cvss/
$ cd docker-nethive-cvss/
$ docker build -t nethive-cvss .
$ ./cvss

```

1. Start **Nethive** and copy default configuration

```auto
$ cd Nethive-Project/
$ cp .env.example .env

```

1. Activate all **Nethive** processing engines: `$ sudo python3 main.py `.  
On the menu prompt, choose **[3] Just-Run-This-Thing**, then wait for the engines to be initialized.
2. Start Nethive UI Server

```auto
$ cd Nethive-Project/dashboard/
$ npm install && npm start

```

1. Go to [http://localhost:3000/](http://localhost:3000/)

## GitHub:

> **[GitHub - chrisandoryan/Nethive-Project: Restructured and Collaborated SIEM and CVSS...](https://github.com/chrisandoryan/Nethive-Project)**
>
> Restructured and Collaborated SIEM and CVSS Infrastructure. Presented at Blackhat Asia Arsenal 2020.