IntelOwl
IntelOwl copied to clipboard
[feature] export jobs result in different formats
We could add a button or something like that the user can leverage to download a Job result in different formats like:
- raw JSON
- MISP
- STIX
- etc
Hello Sir, I had a question, Is this meant only for the webui or do we need to add the output converter to overall api?
The frontend does talk with the same API that can be used by the command line interface.
So, usually the steps should be:
- add support of this feature in the backend (Django API)
- leverage the new or modified API in the frontend (GUI)
- leverage the new or modified API in the CLI (pyintelowl)
ATM we are working on the complete rework of the GUI (should be ready for the GSoC) so we do not suggest to make changes there now
@mlodic We need the endpoint(s) which can present this data in the various formats, right?
yeah
Hey, @mlodic @eshaan7 I would like to work on this issue. I am new to this project, if looks fine can I take this up?
yeah, you can try to work on this. Please create a branch from the dev-v4
branch instead of develop because there we have the new GUI and you'll need to work on that.
This is a pretty complete task (frontend,backend,cli) so it is really a good way to touch most of the things in the project
Can a provide a sample JSON output? I know STIXv2.1 since STIX is basically JSON I just need to map it thanks!
JSON output may vary based on the analyzers requested. Mapping to STIX could be a really complex task to do. I think that this issue should be rethougth in a more feasible manner. Some export formats like STIX or MISP cannot just be converted so easily.
closed because unclear the goal