mimecast_log_collector

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #ai #typescript #llm #go #golang #android #machine-learning #rust #deep-learning #linux

mimecast_log_collector

★ 11 Open GitHub ↗

Collect SIEM logs from the Mimecast API using Python. Currently supports multiple endpoints. Use this to be able to easily and quickly forward to events for security logging, such as a SIEM.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Mimecast

### Note: I no longer have access to the Mimecast API therefore unable to test further developments. Help is welcomed in this regard.

Supports the following Mimecast endpoints:

* get_siem_logs
* get_ttp_urls
* get_auth_logs

## Documentation:

https://www.mimecast.com/tech-connect/documentation/endpoint-reference/

## Getting Started:
1. Edit `configuration.py` to change Mimecast API details and select approriate requirements. The auth creds are required (you will need to generate a API user via the console) - https://www.mimecast.com/tech-connect/documentation <br>
2. The script will automatically create the directories defined in 'configuration.py` for hashing / logging
```
   hash_file
   audit_events
   ttp_events
```
3. Run `run.py` to start ingesting - program is threaded so each source configured in `configuration.py` will run simultaneously.

## Output:

The AUTH and TTP events are recorded, serialized into JSON and sent to syslog if configured. They are not recorded to file.
SIEM events are recorded to file and shipped to syslog, if configured.

You can use a SIEM product to ingest these events easily (since it's JSON). Examples include, SIEM Monster, Splunk, ManageEngine, ELK, QRadar, etc.

## Troubleshooting

Connectivity / SSL issues when connecting to the Mimecast API: https://stackoverflow.com/questions/56858075/pulling-mimecast-logs-with-python

If you are experiencing high CPU usage - increase the interval time in `configuration.py` until a point where the issue no longer occurs.

## Contact

Joshua Smeda <br>
https://www.linkedin.com/in/joshua-smeda-7b9102103/

mimecast_log_collector

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README