IntelOwl
IntelOwl copied to clipboard
feat(analyzers): add APIVoid v2 API support with v1 fallback
Description
APIVoid released their v2 API on 10 Feb 2025, and v1 will be deprecated in Feb 2026.
IntelOwl was still using the v1 endpoints, so this PR updates the APIVoid analyzer to support the new v2 API.
What’s included
- Added full APIVoid v2 API support
- New JSON POST requests instead of GET
X-API-Keyheader for authentication- Updated endpoints:
/v2/ip-reputation/v2/url-reputation/v2/domain-reputation
- Added configuration option:
"api_version": "v2"or"use_v2": true - Preserved full backward compatibility with v1 (fallback on invalid or missing config)
Related Issue
Closes #3006
Type of change
- [x] New feature (non-breaking change which adds functionality)
Checklist
- [x] I have read and understood the rules about how to Contribute to this project
- [x] The pull request is for the branch
develop - [x] A plugin (analyzer) was changed
- [x] I followed the documentation "How to create a Plugin"
- [x] No new docs were required (API upgrade only, no new analyzer)
- [x] This analyzer requires an API key, so no updates to FREE_TO_USE_PLAYBOOKS were needed
- [x] The analyzer interacts with an external service and includes a
urlattribute - [x]
_monkeypatch()was already present and still functional for mocked tests
- [x] No new libraries were added
- [x] Linters (Black, Flake8, Isort) give 0 errors locally
- [x] The change was tested locally with a standalone sandbox test to validate request flow
(Notes:
This PR updates an existing analyzer and does not require new test files, datamodels, or GUI changes.)
Let me know if you need any changes or improvements.