-
Hi,
"clamav-unofficial-sigs" use allows increasing ClamAV detection rate, by adding extra signatures.
See https://github.com/extremeshok/clamav-unofficial-sigs.
The request is simple: add "clam…
-
A classic ingestor could be one made from a popular file service like MalwareBazaar.
We could extract the samples from [here](https://bazaar.abuse.ch/api/#latest_additions) periodically and send th…
-
Hello,
I've got the same problem using Filebeat threatintel module.
Here is my configuration from `filebeat.yml` (module enabled: AbuseURL, AbuseMalware and misp) :
```
# Module: threatint…
-
### Actual behavior
When running bash /tmp/INSTALL.sh -A
the script does not install misp modules.
`Error: Setting change rejected.
Invalid setting "Plugin.Enrichment_bgpranking_enabled". Pleas…
-
## Description
Got this Error
ERROR {'name': 'MISSING_REFERENCE_ERROR', 'message': 'Element(s) not found'} | timestamp=2024-05-13T06:03:03.679354Z name=MalwareBazaar Recent Additions exc_info=T…
-
Hi, I ran Drakvuf with Procmon and Apimon plugins on a Windows 7 SP1 virtual machine with a sample malware that I found in [MalwareBazaar](https://bazaar.abuse.ch/sample/547fafed7012a52203d39f1db5947b…
-
Are there any plans to expand this database in the future?
I have also been collecting some hashes of malicious files recently, looking forward to your reply, thanks
-
**Description**
Abuse CH threat intel integration (2.0.0) is pulling ip addresses ioc in the data stream logs_ti-abusech.threatfox-default indice
The transform **logs-ti_abusech.latest_threatfox-…
-
Install the cortex and elastic search on a ubuntu server:}
Elastic search was running ok
cortex suppose the same:
● cortex.service - cortex
Loaded: loaded (/etc/systemd/system/cortex.serv…
-
Hi, can you check for this error. Seems like the function is still using syntax from Python 2 (I'm not sure though)
```python
Traceback (most recent call last):
File "C:\Users\[username]\AppData\…