🛡️ ThreatIntel Hub

SOC-Grade Threat Intelligence Platform (Hackathon Project)

---

📌 Overview

ThreatIntel Hub is a local, SOC-grade Threat Intelligence Platform that enables security teams to:

• Aggregate Indicators of Compromise (IOCs)
• Normalize and store threat data
• Visualize threats in a live dashboard
• Search and analyze indicators
• Export data to SIEM / SOAR systems (JSON, STIX, Sigma)
• Run fully on localhost with no cloud dependency

This project is designed for SOC analysts, incident responders, and security operations teams.

---

🧱 Tech Stack

Frontend

• React + Vite
• TailwindCSS
• Recharts
• Axios

Backend

• FastAPI
• MongoDB
• APScheduler
• STIX2

Infrastructure

• Docker (MongoDB)
• VS Code (recommended)

---

📁 Project Structure

hackathon/
├── threatintel-frontend-soc/
├── threatintel-backend/
└── README.md

---

🚀 How to Run (Localhost)

1️⃣ Start MongoDB (Docker)

docker start threatintel-mongo

If not created yet:

docker run -d --name threatintel-mongo -p 27017:27017 mongo:7

---

2️⃣ Start Backend

cd threatintel-backend
venv\Scripts\activate
uvicorn app.main:app --reload --port 8000

API Docs: http://localhost:8000/docs

---

3️⃣ Start Frontend

cd threatintel-frontend-soc
npm run dev

UI: http://localhost:5173

---

🏁 Status

Hackathon-ready SOC-grade threat intelligence platform.