Fabric automates and standardizes reports for various cybersecurity use cases, such as security operations, pen-testing, CTI, incident response, vulnerability management, etc. We aim to help teams create clear, consistent, and actionable reports without all the manual effort.

Here's how it works: Fabric reads the template definition, fetches and collates data from external sources (Elastic Security, Splunk, OpenCTI, HackerOne, NIST NVD, etc), mutates it to fit the content definitions (using embedded JQ queries) and renders the content (using Go templates or services like OpenAI or a local LLM).

The result is a Markdown or HTML document. While we're working on proper core support for PDF formatting in Fabric, it's possible to generate polished PDFs from the Markdown files with Pandoc and the Eisvogel template.

The templates are defined with a custom configuration language based on HCL (used for Terraform configs!), so the code is familiar, easily readable/writable, modular, and powerful.

Fabric solves the pain of manually creating cybersecurity reports, which involves pulling data from multiple security solutions and dealing with inflexible static templates. With Fabric, all of this is standardized, automated, and easy to customize.

One of the examples is SOC operational reporting: we recently wrote a blog post about it - https://blackstork.io/blog/soc-weekly-activity-overview-repo...

There are more templates in our repo - https://github.com/blackstork-io/fabric-templates

We'd love feedback from security/compliance practitioners or anyone interested in the space! And reach out if you're building something for cybersec!

Website: https://blackstork.io/fabric/

Docs: https://blackstork.io/fabric/docs/

Source: https://github.com/blackstork-io/fabric

Templates: https://github.com/blackstork-io/fabric-templates

Contact: [email protected]