Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DomainTools Iris - Pivot Analyzer #586

Merged
merged 4 commits into from
Feb 10, 2020

Conversation

ChuckWoodraska
Copy link
Contributor

This Analyzer uses the newer DomainTools Iris API for pivoting on IPs, Hashes, and email addresses.

@nadouani
Copy link
Contributor

nadouani commented Jan 8, 2020

Hello @ChuckWoodraska Thanks a lot for this PR, is it possible to add a PR to https://github.com/TheHive-Project/CortexDocs/blob/master/analyzer_requirements.md to include this analyzer?

@ChuckWoodraska
Copy link
Contributor Author

Added doc PR: TheHive-Project/CortexDocs#54

@nadouani nadouani added this to the 2.4.0 milestone Jan 8, 2020
@nadouani
Copy link
Contributor

Hello @ChuckWoodraska is it possible to have a sample screenshot of analyzer report and mini reports? (blogging purpose) :)

@ChuckWoodraska
Copy link
Contributor Author

@nadouani I added screenshots to the PR for the short and long summaries.

@nadouani
Copy link
Contributor

@ChuckWoodraska I just wanted to know if there is any particular reason to create a DomainToolsIris folder instead of using the existing DomainTools folder?

@EngageCloud
Copy link

EngageCloud commented Jan 21, 2020

@ChuckWoodraska I just wanted to know if there is any particular reason to create a DomainToolsIris folder instead of using the existing DomainTools folder?

Hi Nabil @nadouani, this is Sourin the associated PM and thought I will make an attempt to explain this. DomainTools Iris is the latest product offering and does not overlap with the older Classic toolsets. The APIs associated hence have different capabilities, with Iris having an extended dataset.

As a product strategy, we are no longer extending the older Integration (API capabilities). So if there are customers who continue to exist the original DomainTools Hive Cortex integration, they can. However, I believe it was a community contribution so we cannot support the codeset. With Iris, our users can reach out to us for extended support.

Does this make sense?

@nadouani
Copy link
Contributor

Hello @EngageCloud Ok, this makes sense. We need to communicate correctly about it. Could you please DM me to talk about this topic?

@EngageCloud
Copy link

Hello @EngageCloud Ok, this makes sense. We need to communicate correctly about it. Could you please DM me to talk about this topic?

@nadouani don't know a way to DM you in GH (anymore). Since I don't see your email on the profile, I decided its best not to pry in git-log :). Can you send me an email [email protected]

@EngageCloud
Copy link

Hello @EngageCloud Ok, this makes sense. We need to communicate correctly about it. Could you please DM me to talk about this topic?

@nadouani don't know a way to DM you in GH (anymore). Since I don't see your email on the profile, I decided its best not to pry in git-log :). Can you send me an email [email protected]

Hi, @nadouani just following up on this thread to see if there are any further actions needed from our end. If so, look forward to your note (my email above).

@jeromeleonard jeromeleonard self-requested a review February 8, 2020 17:30
@jeromeleonard
Copy link
Contributor

@EngageCloud I will review this analyzer, sending you an email.

@jeromeleonard jeromeleonard modified the milestones: 2.4.0, 2.5.0 Feb 8, 2020
@jeromeleonard jeromeleonard merged commit e5e645e into TheHive-Project:develop Feb 10, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants