unfurl

unfurl copied to clipboard

Evaluate newest Flask version for use

2

As flagged in #156, the newest Flask (2.2.0) causes problems for Unfurl. Pinning to an older version fixes for now, but we should investigate what's changed that causes the crash,...

obsidianforensics

**Description** Some Microsoft products rewrite links to go through their scanning engine. Extracting the destination URL is simple enough, but it looks like there's more interesting stuff in the link...

obsidianforensics

Parse phone numbers

2

**Description** Consider parsing phone numbers? Not sure how useful/common it would be, but there's a pip package that does most of the work. **Examples** > import phonenumbers > x =...

obsidianforensics

**Description** Sometimes the same parsers Unfurl uses on URLs could be useful on local file paths. I'll need to think about how to implement this, what types of file paths...

obsidianforensics

The examples page / user guide hasn't changed much since Unfurl was released ~2 years ago. Take a pass through it and make any needed updates. Ideas: - Section on...

obsidianforensics

Create a how-to / getting started guide for building parsers.

obsidianforensics

Medium URLs

2

Add basic parsing for Medium URLs. **Examples**: - https://medium.com/@konigsberg/patterns-and-anti-patterns-of-the-primary-interrupt-d82cc1362048 - https://medium.com/timesketch/thinking-in-graphs-exploring-with-timesketch-84b79aecd8a6 **References**: - https://superuser.com/questions/1111599/how-does-medium-com-for-example-generate-the-url-fragment-hash

obsidianforensics

**Description** There is a bunch encoded in Proofpoint URL Defense URLs - at this point I'm unsure what beyond the "original" URL can be extracted. Needs exploration. **Examples** From https://help.proofpoint.com/Threat_Insight_Dashboard/API_Documentation/URL_Decoder_API:...

obsidianforensics

**Description** Flake IDs are similar to snowflakes or UUIDv1 in that there is interesting info inside them. **Examples** - 8HFaR8qWtRlGDHnO57 **References** - https://github.com/boundary/flake

obsidianforensics

**Description** Zoom (zoom.us) has gotten pretty popular recently. What can be pulled out of Zoom URLs? **Examples** - Search to find Zoom URLs: https://www.google.com/search?q=inurl%3Azoom.us%2Fj+and+intext%3Ascheduled - https://zoom.us/j/213045107 (fictitious I hope) **References**...

obsidianforensics