How csquirrel84/proj_orochi works
Orochi appears to be an Ansible-based deployment project for a network monitoring and incident-response environment. The visible playbook names suggest workflows for preparing artefacts, setting up a management box, deploying remote capture, and checking updates. The roles cover the monitoring stack and supporting services. Only the Suricata source-fetcher implementation was sampled, so links between playbooks and roles are not asserted; the README content provided no additional capability details.
Main entry points: fetch_suricata_sources.py Fetch Suricata Rules · prep_artefacts.yml Prepare Artefacts · check_updates.yml Check Updates · setup_mgmt_box.yml Setup Management
Components 21
Operator Workflows
- Prepare Artefacts
orochi/playbooks/prep_artefacts.yml - Setup Management
orochi/playbooks/setup_mgmt_box.yml - Deploy Capture
orochi/playbooks/deploy_remote_capture.yml - Check Updates
orochi/playbooks/check_updates.yml
Network Monitoring
- Fetch Suricata Rules
orochi/files/fetch_suricata_sources.py - Suricata
orochi/roles/suricata/tasks/main.yml - Zeek
orochi/roles/zeek/tasks/main.yml - Velociraptor
orochi/roles/velociraptor/tasks/main.yml - Arkime
orochi/roles/arkime/tasks/main.yml
Investigation Services
- RITA
orochi/roles/rita/tasks/main.yml - Timesketch
orochi/roles/timesketch/tasks/main.yml - TheHive
orochi/roles/thehive/tasks/main.yml - CyberChef
orochi/roles/cyberchef/tasks/main.yml
Platform Services
- Elasticsearch
orochi/roles/elasticsearch/tasks/main.yml - Kibana
orochi/roles/kibana/tasks/main.yml - Fleet
orochi/roles/fleet/tasks/main.yml - Mattermost
orochi/roles/mattermost/tasks/main.yml - Nginx Proxy
orochi/roles/nginx_proxy/tasks/main.yml
Other components
- Operator
- Rule Artefacts
- Free Rule Sources
Connections 8
- Operator → Prepare Artefacts: runs
- Operator → Setup Management: runs
- Operator → Deploy Capture: runs
- Operator → Check Updates: runs
- Prepare Artefacts → Fetch Suricata Rules: invokes
- Check Updates → Fetch Suricata Rules: invokes
- Fetch Suricata Rules → Free Rule Sources: downloads
- Fetch Suricata Rules → Rule Artefacts: writes