Cyber Watch - Core Algorithm

Watcher.cyber_watch.core.fetch_latest_cves()

Fetch latest CVEs from cve.circl.lu API and store new ones in database. Automatically matches against active WatchRules and records hits.

Returns:

None

Watcher.cyber_watch.core.fetch_ransomlook_data()

Fetch ransomware data from RansomLook API. Includes groups, recent victims, and threat actors. Automatically matches against active WatchRules and records hits.

Returns:

None

Watcher.cyber_watch.core.fetch_ransomware_data()

Fetch ransomware groups and recent victims from ransomware.live API. Automatically matches against active WatchRules and records hits.

Returns:

None

Watcher.cyber_watch.core.send_cyber_watch_notifications(content)

Send CyberWatch notifications to all enabled subscribers via Slack, Citadel, TheHive and/or Email.

Watcher.cyber_watch.core.start_scheduler()

Launch multiple planning tasks in background:

• Fetch latest CVEs every 30 minutes.

• Fetch ransomware data every 30 minutes.

• Fetch RansomLook data every 30 minutes.