Closed jaegeral closed 1 year ago
This should be read for a first round of reviews. As with the attributes, we will not burry it in the sketch sub command as more or less everything has to do with a sketch. While in theory you could get anything in this PR done with the already existing timesketch attributes
command group, the nesting etc make it hard to add IOCs and especially the listing of IOCs can be more specific that way (IMHO).
This pull requests adds a new command int he Timesketch CLI called
intelligence
.Add an ioc:
Example:
List intelligence:
Example:
Or as csv:
As text:
It also adds relevant portions to the documentation.