search

certtools / intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
https://docs.intelmq.org/latest/
GNU Affero General Public License v3.0
976 stars 297 forks source link

Feature Request: Shadowserver parser setting feed.documentation link #2466

Closed gethvi closed 9 months ago

gethvi commented 9 months ago

As the title says. feed.documentation can not be configured beforehand because the shadowserver parser processes various reports dynamically based on a schema.

Currently the parser sets correct feed.name. It could also set the feed.documentation link for each report type.

There are many extra fields.

kamil-certat commented 9 months ago

As a workaround, a sieve filter can be used