Add ASN enrichment to misphunter-host objects

TheDr1ver / MISPHunter

Uses searches on 3rd party services and MISP to track actor infrastructure as it's built

Apache License 2.0

2 stars 0 forks source link

Add ASN enrichment to misphunter-host objects #12

Open TheDr1ver opened 3 years ago

TheDr1ver commented 3 years ago

ASN org, City/Country of origin

TheDr1ver commented 3 years ago

Not sure if it's better to just pull this from the service that pinged the host, or better to roll our own. The former is certainly easier, but it seems ASNs change quite frequently on those services.

TheDr1ver commented 3 years ago

Potentially use this in the integration - https://github.com/mlaferrera/asparser