InQuest / ThreatIngestor

Extract and aggregate threat intelligence.
https://inquest.readthedocs.io/projects/threatingestor/
GNU General Public License v2.0
821 stars 135 forks source link

How to Twitter > PastebinProcessor > MISP #105

Open Castaldio86 opened 3 years ago

Castaldio86 commented 3 years ago

Hi All,

I've seen the following in the manual, but now I want to have the combine the pastebin-processor with the MISP module.

Could someone help me figure it out?

Thanks in advance.

sources:
- name: twitter-search-pastebin
module: twitter
credentials: twitter-auth
q: pastebin.com ioc

operators:
- name: pastebin-processor
module: sqs
credentials: aws-auth
allowed_sources: [twitter-feed-c2, twitter-search-pastebin]
artifact_types: [URL]
filter: https?://pastebin.com/.+
queue_name: pastebin-processor
url: {url