Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added a is-malicious attribute for abuseipdb and added a google-safe-… #399

Merged
merged 2 commits into from
Jul 13, 2023

Conversation

TinyHouseHippos
Copy link

…browsing object for the google-safe-browsing expansion module

The AbuseIPDB object template is used for the AbuseIPDB expansion module, added the is-malicious attribute. The module will determine if the ip or domain is malicious based on the abuse-confidence-score. The expansion module is also changed to add a threshold configuration. If abuse_confidence_score >= abuse_threshold it is flagged as malicious.

The google-safe-browsing object template is used for the google safe browsing expansion module.

…browsing object for the google-safe-browsing expansion module
@mokaddem
Copy link
Contributor

Looking good.
Thanks a lot!

@mokaddem mokaddem merged commit d94ab61 into MISP:main Jul 13, 2023
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants