IntelOwl icon indicating copy to clipboard operation
IntelOwl copied to clipboard

[Analyzer] TweetFeeds

Open mlodic opened this issue 2 years ago • 2 comments

Name

TweetFeeds

Link

https://tweetfeed.live

Type of analyzer

observables

Why should we use it

Free from the community

Possible implementation

https://tweetfeed.live/api.html Extract their IOCs periodically in a text file and perform a simple match there.

mlodic avatar Jun 27 '23 10:06 mlodic

the service is no more available because Elon decided to force payment for Twitter's APIs 🤷🏻

mlodic avatar Aug 28 '23 13:08 mlodic

the service is back online. We should integrate it and then notify the creator to have IntelOwl added to the homepage.

mlodic avatar Feb 07 '24 15:02 mlodic

@mlodic assign pls

g4ze avatar Mar 18 '24 05:03 g4ze

hey! Concerning the implementation, can't we directly take in input parameters from the user as filter1 , filter2, time and then just generate the URL, get the list and perform look up on each fresh run?

g4ze avatar Mar 18 '24 19:03 g4ze

yep, it is not required to manage an internal cache like I mentioned. That would be maybe the optimal solution because we cannot request all the data from the service at each request. It would make sense to just download all the data, keep it internally (like we do for Tor, Maxmind, etc) and query them internally.

The easiest way is to implement it like you mentioned and that would be better than nothing. The hardest would be to implement this update and caching mechanism to keep the data locally

mlodic avatar Mar 19 '24 08:03 mlodic

I'm thinking of a middle ground approach, where we can periodically update the db based on the url set by the user. Like the feodo tracker, we can let the user decide if they want to update the db for the particular url at every run. Therefore, we can have a solution which is optimised in the sense that if the same url is requested again, the user can decide if they want to update the db again and perform a look up, or just simply depend upon the default update cron routine. How does that sound?

g4ze avatar Mar 19 '24 08:03 g4ze

that sounds good, let's try this!

mlodic avatar Mar 19 '24 08:03 mlodic

solved with v6.0.0

mlodic avatar Mar 28 '24 11:03 mlodic