The CIF Book

Chapter 1 - Introduction

1. What is the Collective Intelligence Framework (CIF)?
2. The CIF community
3. Who supports CIF?
4. Frequently asked questions

Chapter 2 - Getting Started

1. Building a CIF Server
2. Installing CIF
3. Exploring the file system
4. Exploring the CIF binaries
5. Exploring the network services
6. Exploring the software packages installed
7. Exploring Tags
8. Exploring Confidence
9. Exploring Timestamps
10. Exploring Whitelisting
11. Exploring Tokens
12. Exploring Groups
13. Exploring the OSINT pre-configured

Chapter 3 - CIF clients

1. Introducing the CIF client
2. Web Browser Plugins

Chapter 4 - Consuming Threat Intelligence

1. Creating a feed parsing configuration file
2. Tutorial: Parsing a new threat intelligence feed
3. Advanced: Alternate methods for parsing data sets
4. FAQ: Parsing Feeds

Chapter 5 - Generating Threat Intelligence feeds

1. Introducing CIF feeds

Chapter 6 - CIF API

1. Exploring the API
2. CIF SDK
3. Bulk Submissions

Chapter 7 - CIF integration

1. Kibana
2. Snort
3. Bro
4. Bind
5. Tipping Point
6. PassiveDNS
7. FireEye

Chapter 8 - CIF Cookbooks

1. Sharing Threat Intelligence
2. Contributing Threat Intelligence

Chapter 9 - Administration

1. Troubleshooting
2. CIFv1 to CIFv2 Migration
3. Backup and Restore
4. Distributed Environment
5. Monit
6. Pruning the ElasticSearch database

Chapter 10 - Development

1. Introduction
2. Using GitHub for CIF development
3. CIF Architecture Overview