mlsecproject / combine

Tool to gather Threat Intelligence indicators from publicly available sources
https://www.mlsecproject.org/
GNU General Public License v3.0
653 stars 171 forks source link

Adding some more detail to the csv output schema #13

Closed alexcpsec closed 10 years ago

alexcpsec commented 10 years ago

@technoskald anything else we may want to add? As soon as we are done, I will go forward with https://github.com/technoskald/measuring-iq-threat-feeds/issues/4 and https://github.com/technoskald/measuring-iq-threat-feeds/issues/5

krmaxwell commented 10 years ago

We don't need to specify type because IPv4 will always match \d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3} - unless you think we'll add other types later that might otherwise look like FQDNs.

alexcpsec commented 10 years ago

yeah, I am specifically thinking about other types. I'd like it to be "strongly typed", so we have more flexibility later on other stuff.