intelmq.bots.parsers.alienvault package¶
Submodules¶
intelmq.bots.parsers.alienvault.parser module¶
-
class
intelmq.bots.parsers.alienvault.parser.
AlienVaultParserBot
(bot_id: str, start: bool = False, sighup_event=None, disable_multithreading: Optional[bool] = None)¶ Bases:
intelmq.lib.bot.ParserBot
Parse data from the AlienVault API
-
parse_line
(row, report)¶ A generator which can yield one or more messages contained in line.
Report has the full message, thus you can access some metadata. Override for your use.
-
-
intelmq.bots.parsers.alienvault.parser.
BOT
¶ alias of
intelmq.bots.parsers.alienvault.parser.AlienVaultParserBot
intelmq.bots.parsers.alienvault.parser_otx module¶
Events are gathered based on user subscriptions in AlienVault OTX The data structure is described in detail here: https://github.com/AlienVault-Labs/OTX-Python-SDK/blob/master/ howto_use_python_otx_api.ipynb
-
class
intelmq.bots.parsers.alienvault.parser_otx.
AlienVaultOTXParserBot
(bot_id: str, start: bool = False, sighup_event=None, disable_multithreading: Optional[bool] = None)¶ Bases:
intelmq.lib.bot.ParserBot
Parse data from the AlienVault OTX API
-
parse
(report: intelmq.lib.message.Report)¶ A basic JSON parser. Assumes a list of objects as input to be yield.
-
parse_line
(pulse, report)¶ A generator which can yield one or more messages contained in line.
Report has the full message, thus you can access some metadata. Override for your use.
-
recover_line
(line: dict) → str¶ Reverse of parse for JSON pulses.
Recovers a fully functional report with only the problematic pulse.
-
-
intelmq.bots.parsers.alienvault.parser_otx.
BOT
¶ alias of
intelmq.bots.parsers.alienvault.parser_otx.AlienVaultOTXParserBot