Proposal for misp-modules

A list of modules to be done:

• Country code expansion (hover and expansion)
• CIRCL Passive SSL (hover and expansion)
• CIRCL Passive DNS (hover and expansion)
• DMA and Cuckoo sandbox submission (hover and expansion)
• SWIFT Bank lookup (hover)
• Export module: Bro IDS
• asn.shadowserver.org / whois
• RIPEstat module / https://stat.ripe.net/docs/data_api
• OpenDNS module via https://investigate.api.opendns.com/
• Malware Hash Registry / whois / http://www.team-cymru.org/MHR.html
• Import/Export module: Facebook ThreatExchange
• Export module: bpf filter for tcpdump or Google stenographer
• Export module: markdown pdf export including natural language description of a MISP event
• Export module: markdown (table of indicators - to ease the production of reports)

Feel free to add your modules proposal or pick a module to do ;-)

The issue is a broad proposal rather than a single task and names no files or tests. Start by selecting one unchecked module, then review the relevant service documentation linked in the issue, such as the RIPEstat or OpenDNS APIs. Done means the selected module from the checklist is implemented and its behavior is covered by the project’s existing validation or tests.