search

panther-labs / panther-analysis

Built-in Panther detection rules and policies
https://panther.com/
Apache License 2.0
339 stars 173 forks source link

Threat 319 Replace geoinfo_from_ip with new version #1242

Closed akozlovets098 closed 5 months ago

akozlovets098 commented 5 months ago

Background

There are a few rules that are still using from panther_oss_helpers import geoinfo_from_ip which performs lookups directly against the IPinfo URL, causing 429 errors. We should be using from panther_ipinfo_helpers import geoinfo_from_ip

Changes