Basic principles

Contains references to the documentations of the Basics of OpenKAT

Contents

• Basics of OpenKAT
  • General notes
  • Basic concepts
    • Objects, the data model and recursion
    • Indemnification
    • Users and organizations
  • System design
    • Collection: Boefjes and Whiskers
    • Storage: Bytes and Octopoes
    • Analysis: Bits
    • Reports
• Modules
  • Rocky - frontend
  • Mula - scheduler
  • Octopoes - datamodel
  • Bytes - raw data storage
  • Boefjes and whiskers - scanners and normalizers
  • Manon - styling
• Boefjes
• Origin types
• Bits
• Normalizers
  • Burp Suite
• Questions & Configs
  • Disallowed CSP hostnames
  • OOIs in headers
  • Port mapping
• Plugins for OpenKAT: boefjes, whiskers and bits
  • What types of plugins are available?
  • How does it work?
  • Where to start?
  • Existing boefjes
    • Object-types, classes and objects.
    • Example: the boefje for shodan
      • boefje.json
      • schema.json
      • main.py
    • Normalizers
      • normalizer.json
      • normalize.py
      • Yielding a DeclaredScanProfile
  • Adding object-types
  • Bits: businessrules
  • Configurable bits
    • Question object
    • My first question object
    • What happens in the background?
    • Advantages and outlook
  • Adding Boefjes
• Trusted timestamps in OpenKAT
  • About the protocol
  • Available timestamp servers
  • How to verify a timestamp?
    • Download the raw data
    • Verify the hash
    • Verify the timestamp
    • Automation of the verification process