GitHub - prodaft/cradle: CRADLE is a collaborative platform for Cyber Threat Intelligence analysts. It streamlines threat investigations with integrated note-taking, automated data linking, interactive visualizations, and robust access control. Enhance your CTI workflow from analysis to reporting—all in one secure space.

2 min read Original article ↗

Contributors Forks Stargazers Issues MIT License CI


CRADLE Logo

CRADLE

Table of Contents
  1. Try it out! About The Project
  2. Getting Started
  3. Contributing
  4. Acknowledgments
  5. License
  6. Contact

Try it out!

git clone https://github.com/prodaft/cradle.git
cd cradle
docker compose -f docker-compose.demo.yml up -d

CRADLE should be accessible on http://localhost:8000 with credentials admin:admin!

About The Project

CRADLE is an open-source web application designed to empower Cyber Threat Intelligence (CTI) analysts. The platform streamlines threat analysis workflows through collaborative note-taking, visual relationship mapping, and comprehensive report generation.

Key Features:

  • Collaborative Investigation: Shared workspace for team-based threat analysis
  • Entity Relationship Visualization: Graphical representation of connections between threat actors and artifacts
  • Report Generation: Exportable intelligence reports in multiple formats
  • Modular Architecture: Easily extensible design for future enhancements

Repository Structure

The monorepo is organized into three main components:

Directory Description Documentation
backend/ Django-based API and data processing layer README
ui/ Electron/React frontend application README
docker/ Relevant dockerfiles and configurations README
docs/ Documentation and project website Webpage

Built With

Django React Electron Postgres

(back to top)

Getting Started

Prerequisites

  • Docker 20.10+
  • Docker Compose 2.0+
  • Git

Installation

  1. Clone the repository 
    git clone https://github.com/prodaft/cradle.git
cd cradle
  2. Start the Docker containers 
    docker compose -f docker/docker-compose.demo.yml up -d
  3. Access the application at http://localhost:3000

For advanced setup instructions, see the component-specific READMEs:

(back to top)

Contributing

We welcome contributions from the security community! Here's how to help:

  1. Fork the Project
  2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
  3. Commit your Changes (git commit -m 'Add some AmazingFeature')
  4. Push to the Branch (git push origin feature/AmazingFeature)
  5. Open a Pull Request

Acknowledgments

CRADLE is developed by PRODAFT in collaboration with students from TU Delft. Special thanks to everyone who contributed to making this project possible.

Contributors

(back to top)

License

Distributed under the MIT License. See LICENSE for more information.

(back to top)

Contact

CATALYST Threat Intelligence Team - @prodaft - catalyst.prodaft.com

Project Link: https://github.com/prodaft/cradle

(back to top)