LowRegret scoring is collection of python scripts used to score indicator of compromise based on LowRegret model. The model developed by John Hopkins University to respond faster to IOCs received, thus improve network defense.
Reference: https://github.com/JHUAPL/Low-Regret-Methodology
- Arwa Alomari https://github.com/malwr0a/
- Spenser https://github.com/sandcatintel/
git clone https://github.com/malwr0a/LowRegret-Scoring-
To use LowRegret-Scoring you should insert VirusTotal and IPVoid into the secrets.json file with the following format:
{"virustotal": "YOUR_API_KEY", "void": "YOUR_API_KEY"}
Then, drop <IOCs_file_name>.csv file with the following format:
| type | value |
|---|---|
| ip | <IP_IoC> |
| domain | <Domain_IoC> |
| hash | <Hash_IoC> |
The APIs can be requested on the respective service websites:
- Virus Total: https://www.virustotal.com/gui/join-us
- IPVoid: https://www.ipvoid.com/threat-intelligence-apis/