search

PaloAltoNetworks / SafeNetworking

Read only mirror. To contribute or submit issues, please go to the website link --->
https://gitlab.com/panw-gse/as/SafeNetworking/
Apache License 2.0
12 stars 10 forks source link

External application to re-run event updates based on new SFN.processed states #26

Open punisherVX opened 6 years ago

punisherVX commented 6 years ago

With the newly described SFN.processed DB states, there needs to be an application that can be run, externally, that will update the events if, in fact, their SFN.processed state is determined that the event can be re-enriched as the original run was not fruitful.

This is dependent on https://github.com/PaloAltoNetworks/safe-networking/issues/25 being completed first.

Ticket #32: Function to re-set/rerun Cache

After looking at the Telcel data, it would be nice to be able to have SFN re-run domains that have no malware family associated with a document. This covers the use-case of the cache being writing to while AF updates the domain

zube[bot] commented 5 years ago

sdndude said: This is part of the SFN admin utility.