Welcome to Watcher’s documentation!

Contents:

• Install Watcher
  • Prerequisites
  • Launch watcher
  • Static configuration
  • Troubleshooting
• Use Watcher
  • User enrollment
  • Subscribe to notifications
  • Add your RSS source to Threats Detection
  • Manage Legitimate Domains
  • API Key Creation & Management
  • TheHive Export
  • MISP Export
  • Remove & Add to Blocklist
  • CyberWatch Module
  • UDRP Tracking
  • User Profile Page
  • Connectors
  • AI-Powered Threat Intelligence
  • User Interface Customization
  • Archived Alerts
• Update Watcher
  • Update Process
  • Migrate & Populate the database (mandatory)
  • Managing Breaking Changes (optional)
• Developers
  • Open a Pull Request (PR) to contribute to this project
  • Setup Watcher environment
  • Deploy a simple SMTP server to test the email notifications
  • Unit Testing
  • Modify the frontend
  • Migrations: Change the database schema
  • Build the documentation
• MISP API
  • create_misp_tags()
  • create_objects()
  • create_or_update_objects()
  • create_takeover_objects()
  • find_domain_object()
  • get_misp_uuid()
  • update_misp_uuid()
• Common - Core Algorithm
  • collect_observables()
  • generate_ref()
  • remove_html_tags()
  • send_app_specific_notifications()
  • send_app_specific_notifications_group()
  • send_only_thehive_notifications()
  • start_scheduler()
  • update_all_ssl_certificates()
  • update_legitimate_domains_rdap_data()
  • update_legitimate_domains_ssl_data()
  • update_monitored_sites_rdap_data()
• Threats Watcher - Core Algorithm
  • cleanup()
  • extract_entities_and_threats()
  • fetch_last_posts()
  • focus_five_letters()
  • focus_on_top()
  • get_confidence_score()
  • get_normalized_domain()
  • get_pre_redirect_domain()
  • load_feeds()
  • main_watch()
  • reliability_score()
  • remove_banned_words()
  • send_threats_watcher_notifications()
  • start_scheduler()
  • tokenize_count_urls()
• Data Leak - Core Algorithm
  • SearxError
  • check_keywords()
  • check_pastebin()
  • check_searx()
  • check_urls()
  • cleanup()
  • main_data_leak()
  • send_data_leak_notifications()
  • send_data_leak_notifications_group()
  • start_scheduler()
• Site Monitoring - Core Algorithm
  • check_content()
  • check_ip()
  • check_mail()
  • content_fingerprint()
  • create_alert()
  • create_banner_alert()
  • create_rdap_alert()
  • known_networks()
  • monitoring_check()
  • monitoring_init()
  • perform_site_rdap_lookup()
  • previous_alert()
  • remember_networks()
  • send_website_monitoring_notifications()
  • start_scheduler()
  • tlsh_score()
  • update_site_monitoring_rdap_data()
• DNS Finder - Core Algorithm
  • certificate_domains()
  • check_dangling_status()
  • check_dnstwist()
  • clean_wildcard_domain()
  • evaluate_dangling_subdomain()
  • extract_certificate_metadata()
  • get_monitored()
  • in_dns_monitored()
  • invalidate_monitored_cache()
  • is_legitimate_domain()
  • load_dangling_fingerprints()
  • main_certificate_transparency()
  • main_dns_twist()
  • match_fingerprint()
  • print_callback()
  • recheck_dangling_subdomains()
  • resolve_cname_chain()
  • scan_certificate_domain()
  • send_dns_finder_notifications()
  • send_dns_finder_notifications_group()
  • start_scheduler()
  • track_dangling_subdomain()
• Cyber Watch - Core Algorithm
  • fetch_latest_cves()
  • fetch_ransomlook_data()
  • fetch_ransomware_data()
  • send_cyber_watch_notifications()
  • start_scheduler()