threat_note - DPS' Lightweight Investigation Notebook

to allow security researchers the ability to add and retrieve indicators related to their research. As of right now this includes the ability to add IP Addresses, Domains and Threat Actors, with more types being added in the future.
This app fills the gap between various solutions currently available, by being lightweight, easy-to-install, and by minimizing fluff and extraneous information that sometimes gets in the way of adding information. To create a new indicator, you only really need to supply the object itself (whether it be a Domain, IP or Threat Actor) and change the type accordingly, and boom! That's it! Of course, supplying more information is definitely helpful, but, it's not required.
Other applications built for storing indicators and research have some shortcomings that threat_note hopes to fix. Some common complaints with other apps are:

• Hard to install/configure/maintain
• Need to pay for added features (enterprise licenses)
• Too much information
  • This boils down to there being so much stuff to do to create new indicators or trying to cram a ton of functions inside the app.

via pip and fire up the server:
Once the server is running, you can browse to and register a new account to use to login into threat_note with.

Usage
For a good "Getting Started" guide on using threat_note, check out on his blog.

Screenshots
First up is a shot of the dashboard, which has the latest indicators, the latest starred indicators, and a campaign and indicator type breakdown.
You can edit or remove the indicator right from this page, by hovering over the applicable icon on the right-hand side of the indicator.
Clicking on the "New Indicator" button on the Network or Threat Actor page will bring up a page to enter details about your new indicator.
In the screenshot below you can see the "Threat Actors" page, which is similiar to the "Network Indicators" page, however, you'll only be presented with the Threat Actors you've entered.
Lastly, here is the Settings page, where you can delete your threat_note database, as well as control any 3rd party integrations, such as Whois data or was the ability to add an HTTP(s) proxy if you need it to connect to 3rd parties. He also recently added support for a new 3rd party integration, OpenDNS Investigate, which can be activated on this page.