Teler

[!IMPORTANT]
Dear users,

We wanted to share some important updates regarding the development of teler IDS.

🛑 The development of teler IDS is currently on hold. However, we're thrilled to inform you that we've decided to take a bold step by embarking on a complete refactor, starting from scratch to enhance the overall development process. 🚀

In parallel, we're actively laying down the roadmap for teler IDS v3. 📝<br> What we can reveal at this point is that version 3 will leverage eBPF & teler-waf as its support, promising advanced features and capabilities. 🌟

If you have feedback or suggestions regarding the features you'd like to see in teler IDS v3, kindly participate in our anonymous survey 👉 https://s.surveyplanet.com/8he6p7rq

Stay tuned for more updates as we continue to innovate and enhance our intrusion detection system! Tipis-tipis asal menyala abangkuuhh! 🔥🔝🙌🏼

Best!<br> dw1

---

_{As announced in teler-announce#Fm8Yjh_4of0.}

[!NOTE] In the meantime, you can install and download the latest v2 version to continue using it.

<p align="center"> <a href="#"><img alt="teler" src="https://user-images.githubusercontent.com/25837540/97091757-7200d880-1668-11eb-82c4-e5c4971d2bc8.png" height="300" /></a> <h3 align="center"><b>teler</b></h3> </p> <p align="center"> <a href="#"><img alt="Kitabisa Security" src="https://img.shields.io/badge/kitabisa-security%20project-blue" /></a> <a href="/LICENSE"><img alt="License" src="https://img.shields.io/badge/License-Apache%202.0-yellowgreen" /></a> <a href="http://golang.org"><img alt="made with Go" src="https://img.shields.io/badge/made%20with-Go-brightgreen" /></a> <a href="https://github.com/kitabisa/teler/releases"><img alt="Release" src="https://img.shields.io/github/v/release/kitabisa/teler?color=blueviolet" /></a> <a href="#"><img alt="Platform" src="https://img.shields.io/badge/platform-osx%2Flinux%2Fwindows-green" /></a> <a href="https://github.com/kitabisa/teler/issues"><img alt="GitHub issues" src="https://img.shields.io/github/issues/kitabisa/teler" /></a> <h3 align="center"><b>teler</b></h3> </p> <!-- [](https://gitter.im/kitabisa-teler/community?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge) --> <!-- [](https://goreportcard.com/report/teler.app) --> <p align="center"> Real-time HTTP Intrusion Detection <br /> <a href="/.github/CONTRIBUTING.md">Contribute</a> · <a href="/CHANGELOG.md">What's new</a> · <a href="https://github.com/kitabisa/teler/issues/new/choose">Report Bug</a> · <a href="https://github.com/kitabisa/teler/issues/new/choose">Request Feature</a> </p>

---

teler is an real-time intrusion detection and threat alert based on web log that runs in a terminal with resources that we collect and provide by the community. :heart:

| CLI | Dashboard | |--------- |--------------- | | | |

[!NOTE] If you upgrade from prior to v2 frontwards there will be some break changes that affect configuration files. Appropriate adaptations can refer to teler.example.yaml file.

See also:

• kitabisa/teler-waf: teler-waf is a Go HTTP middleware that provide teler IDS functionality to protect against web-based attacks and improve the security of Go-based web applications. It is highly configurable and easy to integrate into existing Go applications.

Table of Contents

• Features
• Why teler?
• Demo
• Documentation
• Supporting Materials
• Contributors
  • Resources
• Pronunciation
• Changes
• License

Features

• Real-time: Analyze logs and identify suspicious activity in real-time.

• Alerting: teler provides alerting when a threat is detected, push notifications include Slack, Mattermost, Telegram and Discord.

• Monitoring: We've our own metrics if you want to monitor threats easily, and we use Prometheus for that.

• Logging: is also provided in file form or sends detected threats to the Zinc logs search engine.

• Latest resources: Collections is continuously up-to-date.

• Minimal configuration: You can just run it against your log file, write the log format and let teler analyze the log and show you alerts!

• Flexible log formats: teler allows any custom log format string! It all depends on how you write the log format in configuration file.

• Custom threat rules: Want to reach a wider range of threats instead of engine-based (default) rules? You can customize threat rules!

• Incremental log processing: Need data persistence rather than buffer stream? teler has the ability to process logs incrementally through the on-disk persistence options.

Why teler?

teler was designed to be a fast, terminal-based threat analyzer. Its core idea is to quickly analyze and hunt threats in real time!

Demo

Here is a preview of teler with conditions of use as:

| Buffer-streams | Incremental | |-------------------- |----------------- | | <a href="https://asciinema.org/a/367616" alt="teler"><img src="https://asciinema.org/a/367616.svg"></a> | <a href="https://asciinema.org/a/367610" alt="teler"><img src="https://asciinema.org/a/367610.svg"></a> |

Documentation

All related documentation about installation, usage & configuration is on teler.app.

Supporting Materials

• teler - Protect Your WebApp! Talks were brought to the OWASP Jakarta: Virtual AppSec Indonesia 2020 event.
• Tutorial: Cyber Threat Hunting - Useful Threat Hunting Tools (Part One), Semi Yulianto gave a brief explanation and how to use teler in the video.
• Empowering Teler HTTP Intrusion Detection as WAF with Fail2ban.
• Detecting web attacks using Wazuh and teler, integrate teler with a unified XDR and SIEM platform, Wazuh.

Contributors

This project exists thanks to all the people who contribute. To learn how to setup a development environment and for contribution guidelines, see CONTRIBUTING.md.

<!-- ALL-CONTRIBUTORS-LIST:START - Do not remove or modify this section --> <!-- prettier-ignore-start --> <!-- markdownlint-disable --> <table> <tr> <td align="center"><a href="https://dw1.io"><img src="https://avatars0.githubusercontent.com/u/25837540?v=4?s=100" width="100px;" alt=""/><br />_{<b>Dwi Siswanto</b>}</a><br /><a href="https://github.com/kitabisa/teler/commits?author=dwisiswant0" title="Code">💻</a> <a href="https://github.com/kitabisa/teler/commits?author=dwisiswant0" title="Documentation">📖</a> <a href="https://github.com/kitabisa/teler/commits?author=dwisiswant0" title="Tests">⚠️</a> <a href="#ideas-dwisiswant0" title="Ideas, Planning, & Feedback">🤔</a></td> <td align="center"><a href="https://projectdiscovery.io/open-source"><img src="https://avatars1.githubusercontent.com/u/50994705?v=4?s=100" width="100px;" alt=""/><br />_{<b>ProjectDiscovery</b>}</a><br /><a href="#tool-projectdiscovery" title="Tools">🔧</a></td> <td align="center"><a href="https://twitter.com/satyrius"><img src="https://avatars2.githubusercontent.com/u/278630?v=4?s=100" width="100px;" alt=""/><br />_{<b>Anton Egorov</b>}</a><br /><a href="#tool-satyrius" title="Tools">🔧</a></td> <td align="center"><a href="https://github.com/0ktavandi"><img src="https://avatars0.githubusercontent.com/u/26356781?v=4?s=100" width="100px;" alt=""/><br />_{<b>0ktavandi</b>}</a><br /><a href="#ideas-0ktavandi" title="Ideas, Planning, & Feedback">🤔</a></td> <td align="center"><a href="http:///instagram.com/fikcompany"><img src="https://avatars3.githubusercontent.com/u/73404079?v=4?s=100" width="100px;" alt=""/><br />_<b>Fik</b></a><br /><a href="#design-fikridhiyau" title="Design">🎨</a></td> <td align="center"><a href="https://github.com/fairyhunter13"><img src="https://avatars3.githubusercontent.com/u/12372147?v=4?s=100" width="100px;" alt=""/><br />_{<b>fairyhunter13</b>}</a><br /><a href="https://github.com/kitabisa/teler/commits?author=fairyhunter13" title="Tests">⚠️</a></td> <td align="center"><a href="http://zufardhiyaulhaq.com"><img src="https://avatars3.githubusercontent.com/u/11990726?v=4?s=100" width="100px;" alt=""/><br />_{<b>Zufar Dhiyaulhaq</b>}</a><br /><a href="https://github.com/kitabisa/teler/commits?author=zufardhiyaulhaq" title="Code">💻</a></td> </tr> <tr> <td align="center"><a href="https://github.com/JustHumanz"><img src="https://avatars3.githubusercontent.com/u/43176061?v=4?s=100" width="100px;" alt=""/><br />_{<b>Aldin Setiawan</b>}</a><br /><a href="https://github.com/kitabisa/teler/commits?author=JustHumanz" title="Code">💻</a> <a href="#a11y-JustHumanz" title="Accessibility">️️️️♿️</a></td> <td align="center"><a href="https://www.kirsle.net/"><img src="https://avatars2.githubusercontent.com/u/1663507?v=4?s=100" width="100px;" alt=""/><br /><sub>