search

certtools / intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
https://docs.intelmq.org/latest/
GNU Affero General Public License v3.0
977 stars 296 forks source link

DCU Parser linked in tests, but does not exist #276

Closed sebix closed 6 years ago

sebix commented 9 years ago

First line of intelmq/tests/bots/parsers/dcu/lib.py:

from intelmq.bots.parsers.dcu import lib

But there's no dcu directory in intelmq/bots/parsers.

SYNchroACK commented 9 years ago

it was removed

aaronkaplan commented 9 years ago

Tomas, we need the DCU bot for us. Why was it simply removed? I believe we need to forward port the DCU bot to the new master version and then test it.

SYNchroACK commented 9 years ago

It was removed because its a private feed. We need to define between us the policy for that kind of feeds. If you think its better to put here, its ok, but it will give possibility to foreign entities understand which private feeds you are using since you used your account to commit the code.

sebix commented 9 years ago

We already have some bots requiring special rights/granted permissions: Alienvault OTX, Fraunhofer DGA, MalwarePatrol Dans Guardian, MaxMind GeoIP, PhishTank, Spamhaus Cert

aaronkaplan commented 9 years ago

Tomas, sorry that's not true. DCU is on github (see CIRCL). So, no it is not private. The password for access is private. Please put it back, thank you.

SYNchroACK commented 9 years ago

In that case, it will give the possibility to foreign entities to understand which private feeds you are using since you used your account to commit the code.

If you dont have any problem with that, please convert the bot to new version and merge it. Its fine ;)

ghost commented 6 years ago

DCU is superseded by CTIP and we have the latter one