MISP
Aditional Alexa 5k 10k 20k warning lists
Would it be possible to add warning lists for:
- top 5k
- top 10k
- top 20k
Some organizations would benefit from these to get rid of potential FPs.
Indeed, this is a good idea. The problem is that Alexa stopped to generate their public list. We would need to add Cisco Umbrella list and make a script to create the various top lists.
This could possibly be an alternative?
s3.amazonaws.com/alexa-static/top-1m.csv.zip
While configuring Alexa warning list I notice that the list is static. It contains a "snapshot" of what was the case in Feb 2017. Rankings have changed till then. Is this a dynamic list? And as zoni171 and cert-lexsi mentions, is there a way to configure to a specific number of records? 1000, 5K, 20K etc. Different organizations use different thresholds ion this. Thanks, CERT-EU
By the way, the Cisco Umbrella list is now in the warning-list:
https://github.com/MISP/misp-warninglists/tree/master/lists/cisco_top1000
we could create new list with a specific limit per warning-list.