Extraction code selects domains and IP's that aren't legit IOC's
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 35/100
Research direction
Start by locating the regex-based extraction code and review Python's tld and ipaddress modules. The work is done when extracted domains, URLs, and IP addresses are validated so illegitimate or non-external indicators are excluded.
Written by the indexing model from the issue text.
Description
In addition to the regex extraction we may want to leverage the tld and ipaddress modules to validate we have legitimate/external domains/urls/ip addresses.
- Dominant language
- Python
- Stars
- 8
- Forks
- 17
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from TheHive-Project/cortexutils
-
enhancement
TheHive-Project/cortexutils#37 · 1 reaction · 2 assignees ·
-
enhancement
TheHive-Project/cortexutils#36 · 1 assignee ·
-
enhancement
TheHive-Project/cortexutils#34 · 1 assignee ·
-
Difficulty 3/5 1-2 days Newbie friendliness 45/100
TheHive-Project/cortexutils#12 · 2 comments ·
All issues in TheHive-Project/cortexutils
Similar issues
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
canonical/paas-charm#368 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
tech debt
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
StevenBlack/hosts#3256 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
qualcomm/qai-appbuilder#275 ·