MISP / misp-sighting-server

MISP sighting server is a fast sighting server to store and look-up sightings on attributes (network indicators, file hashes, system indicators) in a space efficient way.
https://misp.github.io/misp-sighting-server/
15 stars 4 forks source link

Consider adding organisations #2

Open iglocska opened 6 years ago

iglocska commented 6 years ago

Was looking into using this as a plug-in replacement in the future for the sighting system, it indeed looks very good and the performance is insanely fast.

However, in order to fully replicate what we have currently we need to be able to replicate the following:

Once we have all of them covered we can start thinking about phasing out the current implementation (though sharing across instances will still be tricky).

adulau commented 1 year ago

Updated to get rid of the unmaintained ardb and replaced it with kvrocks. Simplified the type support to not use different namespace/db number per type, add org_uuid in the value of the hash table.

adulau commented 1 year ago

Just added a simple ZRANK to be able to dump changes over a period of time. This will allow to generate JSON for sync between a period of time.

Commit https://github.com/MISP/misp-sighting-server/commit/2f6aead7ba5561eade3796a053450f7e9fc63a43