Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IntelMQ Analyzer #15

Open
saadkadhi opened this issue Feb 18, 2017 · 5 comments
Open

IntelMQ Analyzer #15

saadkadhi opened this issue Feb 18, 2017 · 5 comments
Labels
category:feature-request Issue is related to a feature request help wanted scope:analyzer Issue is analyzer related

Comments

@saadkadhi
Copy link
Contributor

Request Type

Analyzer Request

Work Environment

NA

Analyzer Description

Create an analyzer that can query an IntelMQ instance.

@saadkadhi saadkadhi added the scope:analyzer Issue is analyzer related label Feb 18, 2017
@saadkadhi
Copy link
Contributor Author

@3c7 proposed to provide this analyzer.

@3c7
Copy link
Contributor

3c7 commented Mar 23, 2017

Delayed because of missing API at the moment. Heard it is possible to get information using HTTP requests, but currently there is no test system available, here.

@saadkadhi
Copy link
Contributor Author

OK @3c7 let us know if there's any progress. Thx!

@saadkadhi saadkadhi added category:feature-request Issue is related to a feature request help wanted labels Oct 27, 2017
@3c7 3c7 self-assigned this Dec 21, 2017
@3c7
Copy link
Contributor

3c7 commented Dec 22, 2017

The intelMQ analyzer will use the intelmq-fody-backend.

To-om pushed a commit that referenced this issue Apr 17, 2019
@ghost
Copy link

ghost commented Jun 28, 2021

I would also be possible to query the database itself (https://intelmq.readthedocs.io/en/latest/user/eventdb.html)
Otherwise the fody-backend is an option, although it's not the primary use-case fody is made for.

@3c7 3c7 removed their assignment Jun 28, 2021
viviandsilva pushed a commit to viviandsilva/Cortex-Analyzers that referenced this issue Sep 2, 2021
* Added detectionCoverage and fixed families

Added detectionCoverage in output and fixed families output

* Fixed error response for invalid hash

Co-authored-by: Dan Prantl <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
category:feature-request Issue is related to a feature request help wanted scope:analyzer Issue is analyzer related
Projects
None yet
Development

No branches or pull requests

2 participants