intelmq.bots.parsers.anubisnetworks package¶
Submodules¶
intelmq.bots.parsers.anubisnetworks.parser module¶
AnubisNetworks Cyberfeed Stream parser
TODO: Refactor with JSON mapping
There is an old format and a new one - distinguishable by the test cases
Migration to ParserBot does not make sense, as there’s only one event per report anyway
-
class
intelmq.bots.parsers.anubisnetworks.parser.
AnubisNetworksParserBot
(bot_id: str, start: bool = False, sighup_event=None, disable_multithreading: bool = None)¶ Bases:
intelmq.lib.bot.ParserBot
Parse single JSON-events from AnubisNetworks Cyberfeed stream
-
event_add_fallback
(event, key, value)¶
-
init
()¶
-
parse_geo
(event, value, namespace, raw_report, orig_name)¶
-
process
()¶
-
use_malware_familiy_as_classification_identifier
= True¶
-
-
intelmq.bots.parsers.anubisnetworks.parser.
BOT
¶ alias of
intelmq.bots.parsers.anubisnetworks.parser.AnubisNetworksParserBot