intelowlproject / IntelOwl

IntelOwl: manage your Threat Intelligence at scale
https://intelowlproject.github.io
GNU Affero General Public License v3.0
3.85k stars 440 forks source link

Refactor analyzers which download external dbs for local queries #2407

Open mlodic opened 4 months ago

mlodic commented 4 months ago

There are several analyzers like Tor, Maxmind, JA4DB and so on, that download an external db and update it every once in a while. The problem is that they store it as a local file and the analyzers parse those files in search of a specific entry. It would make sense to store them as additional tables in the database and to query the data directly there.