search

kienmarkdo / Telegram-OSINT-for-Cyber-Threat-Intelligence-Analysis

An OSINT tool tailored for comprehensive collection, analysis, and interpretation of cyber threat intelligence from Telegram channels and groups.
1 stars 0 forks source link

Improve IOC Extractor regex #21

Open kienmarkdo opened 6 months ago

kienmarkdo commented 6 months ago

Domain regex: r"\b(?:a-zA-Z0-9?.)+[a-zA-Z]{2,}(?<!.)\b" Thinks "and.And" is a valid domain name.

IPv4 regex: r"\b(?:\d{1,3}.){3}\d{1,3}\b" Does not think "118.99.81.204118.99.81.204" or "Transparent212.119.97.198" contain IPv4 addresses.

Originally posted by @kienmarkdo in https://github.com/kienmarkdo/Telegram-OSINT-and-Graph-Based-Analysis-of-Criminal-Activity/issues/13#issuecomment-1982432546

kienmarkdo commented 6 months ago

Solution for IPv4 regex