# 使用 Homebrew 安装 threatdeck

查看 threatdeck 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:threatdeck
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install threatdeck
```

  证据: local Homebrew formula metadata

## 软件包事实

- **软件包键:** brew:threatdeck
- **软件包管理器:** Homebrew
- **版本:** 0.6.0
- **来源摘要:** TUI threat intelligence monitoring and alerting platform
- **主页:** <https://threatdeck.io/>
- **仓库:** <https://github.com/gripebomb/ThreatDeck>
- **最后更新:** 2026-06-14T11:02:48Z
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- ThreatDeck (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 0.6.0
## 项目历史与用法

ThreatDeck is a terminal-based threat-intelligence monitoring and alerting platform for SOCs, security researchers, and threat-intelligence analysts. Its README presents it as a TUI for feeds, alerts, cached articles, indicators, enrichment queues, keywords, tags, logs, and settings.

### 项目历史

The project is a Rust application built around a local SQLite database and a terminal UI. The README describes feed ingestion from APIs, RSS and Atom feeds, websites, and onion services, with alert generation, deduplication, IOC extraction, local enrichment, notification channels, and dashboard views.

### 采用历史

ThreatDeck appears to be a newer and smaller package than the long-running security CLIs in this batch: the official GitHub page shows a modest star/fork count and a short repository history. Its packaging path is still meaningful because the README documents Cargo installation, source builds, a Homebrew package in the assigned facts, and first-run creation of config and data directories.

### 使用方式

Users launch `ThreatDeck`, add feeds, define keyword or regex alerts with criticality levels, browse and triage alerts in the terminal, and optionally configure enrichment providers. The default config file is `~/.config/ThreatDeck/config.toml`; the README documents the data database path and a `--config-paths` command for exact paths.

### 为什么软件包爱好者会关心

For package nerds, ThreatDeck is interesting as a packaged security TUI: it combines Rust, bundled SQLite, terminal UI dependencies, scheduled feed polling, JSONPath templates, optional Tor/onion access, and local enrichment into a single installable binary.

### 时间线

- Current README: documents Cargo install, source build, first-run config/data paths, feed management, alerts, IOC enrichment, notifications, and SQLite storage.
- Current repository page: shows a small public repository with README, docs, dist artifacts, and Rust source.

### Related projects

- Related tools include RSS/API feed monitors, SOC alert triage dashboards, threat-intelligence platforms, IOC enrichment tools, terminal UI applications, and local SQLite-backed monitoring utilities.

### 来源

- <https://github.com/gripebomb/ThreatDeck#readme - official README for purpose, features, install, config paths, feed types, enrichment, keyboard shortcuts, architecture, and development.>
- <https://threatdeck.io/ - official homepage listed in source_facts and current curation.>


## 安全说明

没有找到 threatdeck 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.config/ThreatDeck/config.toml

## Combined YAML source

View the package source record on GitHub. [combined/threatdeck.yml](https://github.com/mxcl/pkgdb/blob/main/combined/threatdeck.yml)


## 来源

- pkg.so package database
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph