google / timesketch

Collaborative forensic timeline analysis
Apache License 2.0
2.52k stars 577 forks source link

Add `add_intelligence()` function to analyzer interface #3082

Open jkppr opened 2 months ago

jkppr commented 2 months ago

The analyzer interface supports all types of interaction with the sketch like add_tags, add_comment or add_view etc.

With the integration of the Threat Intelligence elements and the Yeti plattform, it would be good to expose the feature to add or manage intelligence to all analyzers as an easy to call function.