intelmq
intelmq copied to clipboard
certtools
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
For `:contains`, `=~` and `!~`, convert the value to string before matching avoiding an exception. If the value is a dict, convert the value to JSON
- Docs: fix syntax in filter expert bot documentation - filter expert: treat filter_regex false as False if the parameter ```yaml filter_regex: false ``` was set, the bot treated this...
Greetings, We deployed IntelMQ on FreeBSD and noticed that there are many issue, mostly due to 1. hardcoded paths (`/usr/lib/python3/dist-packages/…`) 2. Debian-oriented commands (`a2en`, `useradd` with Linux-specific arguments, etc) 3....
https://docs.intelmq.org/latest/admin/installation/linux-packages/#supported-os States: ``` echo "deb http://download.opensuse.org/repositories/home:/sebix:/intelmq/Debian_$(lsb_release -rs)/ /" | sudo tee /etc/apt/sources.list.d/intelmq curl -fsSL "https://download.opensuse.org/repositories/home:sebix:intelmq/Debian_$(lsb_release -rs)/Release.key" | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/intelmq.gpg > /dev/null sudo apt update sudo apt...
Generating MISP feed on every incoming message slows down processing. The new config option let us decide to save them in batches. Cached events are stored in a cache list...
https://github.com/certtools/intelmq/pull/2514#pullrequestreview-2209784734: > I'd ask you to verify / add a test that check() would reject a sieve file with variable used without being declared beforehand @monoidic
MISP Feed output bot got new features: * caching incoming messages to not re-generate on every run; * an ability to select which fields should be mapped and set additional...
set the default log level (internal fallback value) to - DEBUG if the version number indicates this is a preliminary release (alpha, beta, dev) - INFO if the version number...
typ='unsafe' is deprecated fixes https://github.com/certtools/intelmq/issues/2489 Please don't merge before 3.3.1 release is done.
blocked by #2522 and #2523 The release dates need to be entered in NEWS and CHANGELOG before merging