Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Input problem with Custom Analyzer #439

Open
ManFromTheM00n opened this issue Feb 8, 2023 · 0 comments
Open

Input problem with Custom Analyzer #439

ManFromTheM00n opened this issue Feb 8, 2023 · 0 comments

Comments

@ManFromTheM00n
Copy link

Describe the bug
I am trying to edit an existing cortex analyzer (Urlscan_io_Search_0_1_1) to add a new feature. I want to add to this existing analyzer an extra option for a regex based search through Urlscan's capability to search using URL keyword regex. The issue raises when I use a "" character and cortex adds an extra "" character.

To Reproduce
Steps to reproduce the behavior:

Create or edit an analyzer and use as datatype regexp in Service Interaction File.
Use the analyzer and give as an input a regex with "" character in. For example "http://domain.test"
Then the cortex will change the regex into "http\:\/\/domain\.test"
Expected behavior
In this occasion we will expect to use "" character as it is without cortex adding an extra "" character".
The same problem rises when running OpenCTI_SearchObservables_2_0 analyzer with regexp option.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant