Open rbnor opened 4 years ago
I am working on a command line client at the moment that also will be able to output indicators from OpenCTI in various formats. Adding Zeek to the TODO list and will update this issue once there is something to show.
@rhaist Any new on this one?
No progress on the CLI client that's worth reporting yet.
The format itself is not that complicated. Might even be possible to generate that from the front-end export?
REF: https://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds
Please replace every line in curly brackets { like this } with appropriate answers, and remove this line.
Problem to Solve
Want to be able to import and export zeek tab separated intel files
Current Workaround
converting to stiix for example or snort.
Proposed Solution
implement zeek intel on the platform
Additional Information
{ Any additional information, including logs or screenshots if you have any. }