Cortex-Analyzers

mirror of https://github.com/valitydev/Cortex-Analyzers.git synced 2024-11-06 09:05:19 +00:00

History

Jérôme Leonard ac41548a71 #64 #119 update summary()		2018-01-03 13:36:42 +01:00
..
C1fApp_osint.json	#64 #119 Do not request the service for TLP>AMBER	2018-01-03 10:53:31 +01:00
cifquery.py	#64 #119 update summary()	2018-01-03 13:36:42 +01:00
input	#64 #119 update with new values	2018-01-03 10:55:04 +01:00
README	#64 #119 unify config options	2017-12-22 17:34:17 +01:00
requirements.txt	#64 #119 unify config options	2017-12-22 17:34:17 +01:00

README

C1fApp is a free threat feed aggregator. It queries the most common
OSINT threat feeds.

Add the following to application.conf to enable analyzer

```
C1fApp {
        service="query"
        key="Get your key from www.c1fapp.com"
        url="https://www.c1fapp.com/cifapp/api/"
       }
```

To test the analyzer from cmdline

python cifquery.py < input

Testing
--------
cd /opt/thehive

bin/thehive -Dconfig.file=conf/application.conf

bin/cortex -Dconfig.file=/opt/cortex/conf/application.conf