[Intelmq-dev] [Intelmq-users] IntelMQ vs AbuseIO

[Bernhard Reiter]

Hi Patrick,

Am Montag 01 Juni 2020 16:27:24 schrieb Patrick Forsberg:
> Anyone have a quick comparison between AbuseIO and IntelMQ?
>
> I'm currently in the process of getting IntelMQ to work with
> IntelMQ-Mailgen to be able to send out abuse-emails to our constituency
> based on feeds like Shadowserver and since it seems like AbuseIO can do
> just about the same I would like to know the pros and cons of the systems.

for comparing AbuseIO and IntelMQ, I don't know AbuseIO enough.

However if you are looking into IntelMQ Mailgen from
the system we call intelmq-cb-mailgen, 
 https://github.com/Intevation/intelmq-mailgen-release
that is the one we've been developing for the CERT-Bund,
so we can tell you more about it, maybe this helps with the comparison.

The design idea is to be automated, flexible and high through-put.
Thus there is a separation of concerns and several configuration places.
You may have seen the overview diagram:
https://raw.githubusercontent.com/Intevation/intelmq-mailgen/master/docs/notification_overview.svg
There are rules within the IntelMQ export and additional notification formats 
scripts, those are quite flexible, so there is some learning curve.

Once set up, there can be millions of events handled per day automatically
with several people being able to add manual data to the contacts database.

Feel free to ask us here or per direct email, if you have any questions or 
need help with setting it up.

Best Regards,
Bernhard

-- 
www.intevation.de/~bernhard   +49 541 33 508 3-3
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.cert.at/pipermail/intelmq-dev/attachments/20200609/7cd8bb04/attachment.sig>