Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New analyzer: Backscatter.io #420

Merged
merged 2 commits into from Feb 12, 2019

Conversation

Projects
None yet
4 participants
@9b
Copy link
Contributor

9b commented Feb 9, 2019

Hi! I run Backscatter.io where we collect information about mass-scanning conducting on the Internet. This analyzer brings observations and enrichment data directly into TheHive and Cortex. I've tested various data-types in both systems with success. Apart from an API key, nothing else is required. Please let me know if there's anything needed from me to merge this!

screen shot 2019-02-08 at 6 58 11 pm
screen shot 2019-02-08 at 6 58 42 pm
screen shot 2019-02-08 at 6 58 51 pm

@9b 9b changed the title Working copy of Backscatter.io analyzer New analyzer: Backscatter.io Feb 9, 2019

@saadkadhi saadkadhi added this to the 1.16.0 milestone Feb 11, 2019

@saadkadhi

This comment has been minimized.

Copy link
Contributor

saadkadhi commented Feb 11, 2019

Thanks @9b for your submission. We will review it as soon as possible and include it in the upcoming Cortex-Analyzers 1.16.0 release (scheduled for early March).

@saadkadhi saadkadhi referenced this pull request Feb 11, 2019

Closed

Backscatter.io Analyzer #422

@saadkadhi saadkadhi added new-analyzer and removed analyzer labels Feb 11, 2019

@9b

This comment has been minimized.

Copy link
Contributor Author

9b commented Feb 11, 2019

Thank you!

@nadouani nadouani changed the base branch from master to develop Feb 11, 2019

if self.service == 'observations':
summary = raw.get('results', dict()).get('summary', dict())
taxonomies = taxonomies + [
self.build_taxonomy(level, namespace, 'Observations', str(summary.get('observations_count', 0))),

This comment has been minimized.

Copy link
@nadouani

nadouani Feb 11, 2019

Contributor

Any reason these are made strings?

This comment has been minimized.

Copy link
@9b

9b Feb 11, 2019

Author Contributor

No particular reason other than being safe.

@nadouani nadouani removed the needs review label Feb 12, 2019

@nadouani nadouani merged commit fdc8e5b into TheHive-Project:develop Feb 12, 2019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.