CSEC_PUBLIC/intelmq-docker
1
0
Fork 0
mirror of https://github.com/certat/intelmq-docker.git synced 2025-12-06 01:02:52 +01:00
Code Issues Packages Projects Releases Wiki Activity

FIX: Removed BOTS file & updated runtime.yml

Browse Source 
Signed-off-by: Sebastian Waldbauer <waldbauer@cert.at>
This commit is contained in:
Sebastian Waldbauer
2021-08-15 17:26:20 +02:00
parent f3cac6053f
commit c8ce343edc
2 changed files with 5 additions and 1331 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1329
example_config/intelmq/etc/BOTS
View File

File diff suppressed because it is too large Load Diff

7
example_config/intelmq/etc/runtime.yaml
View File

@@ -67,11 +67,11 @@ feodo-tracker-browse-parser:
parameters:
attribute_name: ''
attribute_value: ''
columns: time.source,source.ip,malware.name,status,extra.SBL,source.as_name,source.geolocation.cc
columns: time.source,source.ip,malware.name,status,source.as_name,source.geolocation.cc
default_url_protocol: http://
destination_queues:
_default: [deduplicator-expert-queue]
ignore_values: ',,,,Not listed,,'
ignore_values: ',,,,,'
skip_table_head: true
split_column: ''
split_index: 0
@@ -115,6 +115,9 @@ gethostbyname-2-expert:
destination_queues:
_default: [cymru-whois-expert-queue]
run_mode: continuous
global: {destination_pipeline_broker: redis, process_manager: intelmq, source_pipeline_broker: redis,
ssl_ca_certificate: null, statistics_database: 3, statistics_host: 127.0.0.1, statistics_password: null,
statistics_port: 6379}
malc0de-parser:
bot_id: malc0de-parser
description: Malc0de Parser is the bot responsible to parse the IP Blacklist and