HoneyNet Workshop, Warsaw
May 13, 2014
Security. Analytics. Insight.2
Data Analysis and Visualization LInuX

Security. Analytics. Insight.3
• Live Linux CD based on Ubuntu 13.10 Desktop
• Collection of free tools for data processing & visualization
• Tools work out of the box
• No compilation or installation required
• Comes with documentation
• Quick start description for the most important tools
• Links to manuals and tutorials
What is DAVIX?
Security. Analytics. Insight.4
User-Interface and Menus
Capture

 
Process

 
 
Visualize
Services
Security. Analytics. Insight.5
Selection of Tools
Process VisualizeCapture
• AfterGlow
• R
• RStudio
• Scapy
• Wireshark
• Argus
• BroIDS
• Snort
• LogStash
• nfdump
• p0f
• nmap
• PADS
• Cytoscape
• Gephi
• GGobi
• GnuPlot
• GraphViz
• Maltego
• PicViz
• Tulip
• Treemap• rsyslog
• syslog-ng
Services
Security. Analytics. Insight.6
New Tools in DAVIX 2014
• FlowTag
• Google Earth
• LogStash 1.4
• Maltego
• PRADS
• R Studio
• Tele Traffic Tapper
• dns-browse
• netsed
• nsm-console
• rsyslog
• tcpstat
Studio
Security. Analytics. Insight.7
git://secviz/davix/
• Install script for all the tools
• apt-installs
• Manual installs
• R and R packages, RStudio
• UI setup
• Hardening of image
• Tool configurations - making tools log into logstash, for example [ to come ]
git://secviz/davix/wiki
• Documentation and user guides
GIT repo - Fork - Contribute!
Security. Analytics. Insight.8
To come:
• VM image
• ISO image
How To Use It
Download:


https://github.com/secviz/davix/tree/master/
install/davix-install-all.sh
!
Then run:
!
bash ./davix-install-all.sh
calls
• davix-install-*.sh
• davix-config.sh
Security. Analytics. Insight.9
List of tools with links to online tool
wiki pages
!
Install guide to install on your own

Ubuntu Desktop
PDF User Manual
Security. Analytics. Insight.10
https://github.com/secviz/davix/wiki/!
!
• Information on all the tools
• Open to your contributions
Wiki User Manual
Security. Analytics. Insight.11
DEMO
Afterglow
GephiMondrian
Security. Analytics. Insight.12
More information …
!
!
http://davix.secviz.org
• New version will be announced and published here!
• ISO and VM download locations
13
raffael.marty@pixlcloud.com

DAVIX - Data Analysis and Visualization Linux