act-platform
act-platform copied to clipboard
Whois Worker
Hello,
To begin, thank you very much for this enormous work. I wanted to know why is there no feature to do an automated "whois" when handling the IOCs on the graph and thus benefit from the correlations on the whois-registrant-email and whois-registrant-phone . I looked at the workers' codes, and in fact it is only possible to retrieve this kind of information from the MISP worker. Do you assume that the whois will be done by a worker on the MISP side? I think it would be interesting to be able to investigate dynamically with this kind of feature.
Best regards,