mlsecproject / combine

Tool to gather Threat Intelligence indicators from publicly available sources
https://www.mlsecproject.org/
GNU General Public License v3.0
650 stars 179 forks source link

Fixes for CRITs #155

Open apolkosnik-old opened 8 years ago

apolkosnik-old commented 8 years ago

There are couple of issues with the code when trying to use combine with a recent version of CRITs.

  1. Source is not populated, making the indicators invisible to anybody in CRITs
  2. The old vocabulary is used to specify the IP address type
  3. Some possibly useful fields are not populated with useful data

The next big improvement would be to use bulk upload functionality, but I'll save that for another PR.