connectors icon indicating copy to clipboard operation
connectors copied to clipboard

[ThreatFox] Create the connector

Open IOTech17 opened this issue 5 years ago • 1 comments

Hi,

abuse.ch recently released their IOC platform threatfox : https://threatfox.abuse.ch/api/

https://threatfox.abuse.ch/export/

Could you create a connector as it is a high quality feed?

This need to include the tag of the Threat.

Thank you in advance.

IOTech17 avatar Mar 21 '21 21:03 IOTech17

If you look at the csv file you can import different type of IOC : https://threatfox.abuse.ch/export/#csv

URL sha256 or md5 IP port Domain

This can replace the URLhause connector because this one came with proper tagging of the threat.

However will you create a new connector with option to import or not certain types of IOC or will you create different connector, one for each type of IOC?

IOTech17 avatar Mar 22 '21 16:03 IOTech17

Duplicate of #329.

SamuelHassine avatar Jun 16 '23 21:06 SamuelHassine