parsing suggestion: recognize and decode 12-byte Mongo object ID timestamp (first four bytes)

[johnmccash]

I just read https://techkranti.com/idor-through-mongodb-object-ids-prediction/, and it brought to mind a case I was working last week. Not positive it was actually this, but I'm going to check when I get to work. In any case, it would be useful for unfurl to automatically recognize Mongo object IDs that appear in URLs, and decode the embedded timestamp. (If it already does, I apologize. I wasn't able to find an example ready-to-hand, with which to test, and I don't see any references to Mongo object IDs in the documentation.)

[obsidianforensics]

Thanks for flagging! I have Mongo IDs in a list of todos, but I haven't yet been able to find a real-world example of one in a URL. If you do know of any URLs with these in them, that would be really helpful to me. It certainly would be a great thing for Unfurl to parse out!