dockers

dockers copied to clipboard

If the email is originally sent to the monitored mailbox then all works fine but if a mail is forwarded on for investigation from a user, then the original From...

k41zen

Submitting a .eml/.msg File as Attachment

1

I'd like to submit an eml/msg File as attachment. After adding "message/rfc822" to the .conf "files:" section, I get an error when submitting an email with an attached .eml: ===...

soulsf

### Summary: After updating theHive server, Elastic-search, and then removing unused packages I broke Imap2thehive authentication into TheHive. During my troubleshooting I happened to stumble on using the API key...

vi-or-die

Filename attachment

5

Hi, is possible upload attachment without the temporary filename rename? For example payload security analysis fails because the extension is wrong. Ex: /tmp/randormdir/attachmnetname.doc Thanks!

thevidocq

Invalid Start Byte in email

3

Started to see a decline in the amount of phishing emails being reported and noticed that imap2thehive wasn't importing certain messages. Digging into my error logs on the script, I...

vi-or-die

Alert Keyword section to handle values not enclosed in square brackets

1

Is there anyway we can configure the script to evaluate the whole alert keyword field as a regular expression? I built a centralized mailbox that has mail rules to move...

vi-or-die

maybe this regex will be more accurate for IPs \b((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])(\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])){3})\b

remg427

Hello, thank you for writing this responder. YOu must be very intelligent. Is there a json file that we can use to add this responder to the list of the...

Bruno-Macedo

Hello, When creating the cases, is there a risk when the files are recovered in the phishing case? Indeed if an email contains a dangerous file, I want to be...

Linow974