Metadata-Version: 2.4
Name: chronos-security
Version: 1.1.0
Summary: Unified Security Fusion Platform - Threat Intelligence, Vulnerability Management, IR Playbooks
Home-page: https://github.com/yourusername/CHRONOS
Author: CHRONOS Security Team
Author-email: CHRONOS Security Team <team@chronos-security.io>
License: MIT
Project-URL: Homepage, https://github.com/yourusername/CHRONOS
Project-URL: Documentation, https://chronos-security.io/docs
Project-URL: Repository, https://github.com/yourusername/CHRONOS
Project-URL: Issues, https://github.com/yourusername/CHRONOS/issues
Keywords: security,threat-intelligence,vulnerability-management,cve,epss,phishing,incident-response,cybersecurity,infosec
Classifier: Development Status :: 5 - Production/Stable
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: MIT License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Topic :: Security
Classifier: Topic :: Security :: Cryptography
Requires-Python: >=3.10
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: click>=8.1.0
Requires-Dist: typer>=0.9.0
Requires-Dist: rich>=13.0.0
Requires-Dist: pyyaml>=6.0.0
Requires-Dist: python-dotenv>=1.0.0
Requires-Dist: pydantic>=2.0.0
Requires-Dist: pydantic-settings>=2.0.0
Requires-Dist: cryptography>=41.0.0
Requires-Dist: httpx>=0.25.0
Requires-Dist: scikit-learn>=1.3.0
Requires-Dist: numpy>=1.24.0
Requires-Dist: matplotlib>=3.8.0
Requires-Dist: jinja2>=3.1.0
Provides-Extra: dev
Requires-Dist: pytest>=7.4.0; extra == "dev"
Requires-Dist: pytest-asyncio>=0.21.0; extra == "dev"
Requires-Dist: pytest-cov>=4.1.0; extra == "dev"
Requires-Dist: black>=23.0.0; extra == "dev"
Requires-Dist: ruff>=0.1.0; extra == "dev"
Requires-Dist: mypy>=1.5.0; extra == "dev"
Requires-Dist: pre-commit>=3.5.0; extra == "dev"
Provides-Extra: docs
Requires-Dist: mkdocs>=1.5.0; extra == "docs"
Requires-Dist: mkdocs-material>=9.4.0; extra == "docs"
Dynamic: author
Dynamic: home-page
Dynamic: license-file
Dynamic: requires-python

# CHRONOS Security - Unified Security Fusion Platform

[![PyPI version](https://badge.fury.io/py/chronos-security.svg)](https://badge.fury.io/py/chronos-security)
[![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)
[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
[![Tests](https://img.shields.io/badge/tests-141%20passing-brightgreen.svg)]()

**CHRONOS** is a comprehensive security fusion platform that integrates threat intelligence, vulnerability management, phishing detection, log analysis, reporting, and incident response capabilities into a unified CLI tool.

## 🚀 Features

### 🔬 Threat Intelligence
- **EPSS Integration** - Exploit prediction scoring from FIRST
- **NVD CVE Database** - National Vulnerability Database queries
- **CISA KEV** - Known Exploited Vulnerabilities tracking
- **URLhaus** - Malicious URL reputation checking
- **VirusTotal** - File hash and URL analysis

### 🔓 Vulnerability Management
- **Multi-Format Import** - SARIF, Trivy, Grype, Bandit support
- **Smart Prioritization** - CVSS + EPSS + KEV-based scoring
- **Auto-Enrichment** - Automatic threat intel correlation

### 🎣 Phishing Detection
- **Email Analysis** - SPF, DKIM, DMARC validation
- **URL Reputation** - Real-time malicious URL detection
- **Brand Impersonation** - Detect spoofing attempts

### 📜 Log Analysis
- **Multi-Format Parsers** - Syslog, Auth, CloudTrail, Nginx, JSON
- **ML Anomaly Detection** - IsolationForest-based anomalies
- **Baseline Creation** - Normal behavior profiling

### 📊 Report Generation
- **Multiple Formats** - HTML, Markdown, JSON
- **Audience Targeting** - Technical, Management, Audit templates
- **Charts & Graphs** - Matplotlib visualizations

### 🚨 Incident Response
- **YAML Playbooks** - Codified response procedures
- **Dry-Run Default** - Safe testing before execution
- **Built-in Playbooks** - Malware, phishing, brute force responses

## 📦 Installation

```bash
pip install chronos-security
```

## 🎯 Quick Start

```bash
# Check system status
chronos status
chronos doctor

# Threat intelligence
chronos intel cve CVE-2023-44487
chronos intel url https://suspicious-site.com
chronos intel kev --days 7

# Vulnerability management
chronos vuln import trivy-results.json
chronos vuln prioritize scan.json --top 20

# Phishing analysis
chronos phish analyze suspicious.eml
chronos phish batch ./emails/

# Log analysis
chronos logs analyze server.log --ml
chronos logs baseline access.log

# Reports
chronos report generate report.html
chronos report summary --days 30

# Incident response
chronos ir list
chronos ir run malware_response --dry-run
```

## 🔧 Configuration

Create `~/.chronos/config.toml`:

```toml
[api_keys]
nvd_key = "your-nvd-api-key"
virustotal_key = "your-vt-api-key"

[intel]
cache_ttl_hours = 24

[ir]
dry_run_default = true
```

Or use environment variables:
```bash
export CHRONOS_VIRUSTOTAL_KEY="your-key"
export CHRONOS_NVD_KEY="your-key"
```

## 📚 Documentation

Core commands:
- `detect` - Scan for security threats
- `analyze` - Analyze vulnerabilities
- `defend` - Defensive measures
- `intel` - Threat intelligence
- `vuln` - Vulnerability management
- `phish` - Phishing detection
- `logs` - Log analysis
- `report` - Report generation
- `ir` - Incident response

Run `chronos <command> --help` for detailed usage.

## 🤝 Contributing

Contributions welcome! See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.

## 📄 License

MIT License - see [LICENSE](LICENSE) file.
