search

OpenCTI-Platform / connectors

OpenCTI Connectors
https://www.opencti.io
Apache License 2.0
383 stars 415 forks source link

[Hygiene] Support CIDR and Partial Domains #2263

Open annoyingapt opened 4 months ago

annoyingapt commented 4 months ago

Use case

Currently the Hygiene connector won't match an IP with a CIDR address in the list. It also won't match a partial domain in a list either.

CIDR example 1.255.30.0/24 in vpn-ipv4 list Tested with 1.255.30.45 -> Hygiene failed to match Tested with 1.255.30.0/24 -> works

Domain example .02bancorp.com in bank website list Tested with www.02bancorp.com -> Hygiene failed to match

Additional Information

image

Would you be willing to submit a PR?

Possibly... If you had some guidance on how you would want it to work.

baptiste-fourmont commented 1 day ago

Hello,

Did you have activate the slow search mode in the connector?