This commit is contained in:
Jérôme Leonard 2020-11-18 17:22:27 +01:00
parent c9722aabad
commit 4de696c9b0
3 changed files with 97 additions and 67 deletions

View File

@ -0,0 +1,14 @@
### Palo Alto Minemeld
This responder sends observables you select to a [Palo Alto Minemeld](https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/minemeld) instance.
#### Requirements
The following options are required in the Palo Alto Minemeld Responder configuration:
- `minemeld_url` : URL of the Minemeld instance to which you will be posting indicators
- `minemeld_user`: user accessing the Minemeld instance
- `minemeld_password`: password for the user accessing the Minemeld instance
- `minemeld_indicator_list`: name of Minemeld indicator list (already created in Minemeld)
- `minemeld_share_level`: share level for indicators (defaults to `red`)
- `minemeld_confidence`: confidence level for indicators (defaults to `100`)
- `minemeld_ttl`: TTL for indicators (defaults to `86400` seconds)

Binary file not shown.

After

Width:  |  Height:  |  Size: 2.4 KiB

View File

@ -5,7 +5,9 @@
"url": "https://github.com/TheHive-Project/Cortex-Analyzers",
"license": "AGPL-V3",
"description": "Submit indicator to Minemeld",
"dataTypeList": ["thehive:case_artifact"],
"dataTypeList": [
"thehive:case_artifact"
],
"command": "Minemeld/minemeld.py",
"baseConfig": "Minemeld",
"configurationItems": [
@ -65,5 +67,19 @@
"required": true,
"defaultValue": "86400"
}
],
"registration_required": false,
"subscription_required": false,
"free_subscription": false,
"service_homepage": "https://github.com/PaloAltoNetworks/minemeld",
"service_logo": {
"path": "assets/MM-logo.png",
"caption": "logo"
},
"screenshots": [
{
"path": "",
"caption": ""
}
]
}