Cortex-Analyzers
Cortex-Analyzers copied to clipboard
Cortex Analyzers Repository
Hello, - fix from #1023 - Fix error missing timastamp with empty index - Fix missing dateutil in requirements.txt - Fix warning API Cortex Log  NOT FIX: - check...
New Crowdsec CTI API analyzer https://www.crowdsec.net/
Fix added. No taxonomy was added in case abuse address was found.
Fixing HybridAnalysis analyzer that was not working since API V2 : - Fix added - API Secret not needed anymore in configuration (only API Key) - Adding possibility to analyze...
**Describe the bug** Does not work Abuse_Finder_3_0. Traceback (most recent call last): File "/usr/lib/python3.8/sre_parse.py", line 1039, in parse_template this = chr(ESCAPES[this][1])KeyError: '\\s'During handling of the above exception, another exception occurred:Traceback...
When trying to use Hybrid Analysis Cortex Analyser, analysis fail. I suppose this is because the old v1 API is not supported any more due to v2 migration. Also tried...
While trying to run Cortex Analyzers I'm getting the following error message again and again: { "errorMessage": "Worker cannot be run", "input": "{\"data\":\"1.1.1.1\",\"dataType\":\"ip\",\"tlp\":2,\"pap\":2,\"message\":\"\",\"parameters\":{},\"config\":{\"proxy_https\":null,\"cacerts\":null,\"max_pap\":2,\"jobTimeout\":30,\"check_tlp\":false,\"proxy_http\":null,\"max_tlp\":2,\"auto_extract_artifacts\":false,\"jobCache\":10,\"check_pap\":false}}", "success": false } I was working on...
TorBlutMagie has been taken down since 2018 this will fix it by using an alternative domain that exports the same information. I can rework the Analyser if required to be...
Hello, I was inspired by EmlParser to improve MsgParser. It integrates attachments as observables as well as possible IOC. * Add refactor modules by using external libraries * Explore attachments...
- Use newer `spec()` syntax - Leverage `watch_monitoring()` to monitor collection completion, versus looping - Allow for setting max query duration