reconurge/flowsint
Flowsint
Flowsint is an open-source intelligence framework and reconnaissance orchestrator used for cybersecurity investigations. It functions as a containerized tool runner and data mapper, automating the collection of intelligence from open-source providers and APIs to profile targets and map threat intelligence.
The platform distinguishes itself through a graph-based investigation interface, where processed raw intelligence is converted into nodes and edges to visualize relationships between entities. It allows for the creation of sequenced pipelines that chain data enrichment tools, enabling the output of one tool to serve as the input for the next.
The system covers a broad range of OSINT capabilities, including cryptocurrency wallet analysis, domain and IP metadata enrichment, social presence enumeration, and email exposure auditing. It supports custom data type definitions and schema-driven validation to extend its analytical capabilities.
The software provides options for local-first data storage to ensure privacy or centralized server deployment with frontend proxying for team access.
Features
- OSINT Automation Frameworks - Provides a framework for automating intelligence gathering using a library of pre-built data enrichers.
- Reconnaissance Workflow Orchestrators - Orchestrates the sequencing and execution of security discovery modules and external APIs into automated enrichment pipelines.
- Sequential Step Orchestrators - Chains multiple data enrichment tools in a sequence where the output of one step serves as the input for the next.
- OSINT Investigation Platforms - Offers a visual analysis platform for mapping entity relationships and automating intelligence gathering through graph workflows.
- Visual Relation Mappers - Translates processed raw intelligence into visual graph patterns using nodes and edges for relationship analysis.
- Graph Data Models - Implements storage architectures that represent intelligence entities as interconnected nodes and edges.
- External Intelligence Integrators - Wraps external APIs and CLI utilities into a consistent interface for retrieving raw intelligence data.
- Graph Node Visualizations - Converts processed intelligence results into network graph nodes and edges for visual analysis.
- Intelligence Enrichment - Provides automated workflows to enrich target data using third-party reconnaissance and threat intelligence APIs.
- Threat Entity Relationship Graphs - Visualizes relationships between security entities like domains and people using directed graphs.
- Open Source Intelligence Tools - Provides a modular platform for defining custom data schemas, validators, and enrichers for cybersecurity investigations.
- Passive Intelligence Gathering - Automates the collection and enrichment of data from open source providers and APIs to profile targets.
- Reconnaissance Workflow Automation - Executes automated pipelines for reconnaissance tasks to gather intelligence on targeted entities.
- System Capability Extensions - Integrates plugins that add new operational capabilities and analytical flows to the core system logic.
- Intelligence Gathering Extensions - Integrates custom enrichers to add specialized data gathering logic for specific investigation needs.
- Web Crawling and Scraping - Extracts emails, phone numbers, internal links, and tracking codes from web pages using automated crawling.
- Local-First Storage - Prioritizes local data persistence to ensure user data sovereignty and privacy during investigations.
- Security Tool Orchestrators - Integrates containerized utilities and external APIs into a unified interface to execute complex reconnaissance tasks.
- Containerized CLI Tools - Executes security utilities within isolated containers using image management to ensure system safety.
- Containerized Execution Environments - Runs security utilities in isolated containers to ensure portability and system safety.
- Relationship Graph Visualizers - Maps relationships between entities using a high-performance graph interface for interactive data exploration.
- Cyber Threat Intelligence Maps - Converts raw intelligence data into structured graph representations to track infrastructure and actor relationships.
- Local Data Storage - Maintains all collected intelligence on the local device to preserve privacy and data sovereignty.
- Social Presence Enumeration - Searches for specific usernames across multiple social platforms to identify linked accounts and metadata.
- Tooling Plugin Systems - Provides an architecture for adding custom tools and commands via external module loading.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
