intelmq.bots.parsers.anubisnetworks package¶
Submodules¶
intelmq.bots.parsers.anubisnetworks.parser module¶
AnubisNetworks Cyberfeed Stream parser
TODO: Refactor with JSON mapping
There is an old format and a new one - distinguishable by the test cases
Migration to ParserBot does not make sense, as there’s only one event per report anyway
- class intelmq.bots.parsers.anubisnetworks.parser.AnubisNetworksParserBot(bot_id: str, start: bool = False, sighup_event=None, disable_multithreading: Optional[bool] = None)¶
Bases:
intelmq.lib.bot.ParserBot
Parse single JSON-events from AnubisNetworks Cyberfeed stream
- event_add_fallback(event, key, value)¶
- init()¶
- parse_geo(event, value, namespace, raw_report, orig_name)¶
- process()¶
- use_malware_familiy_as_classification_identifier = True¶
- intelmq.bots.parsers.anubisnetworks.parser.BOT¶
alias of
intelmq.bots.parsers.anubisnetworks.parser.AnubisNetworksParserBot