TheHive-Project / TheHive-Project/Cortex-Analyzers
[FR] Infoblox (BloxOneThreatDefence) TIDE analyzer
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 490
- Forks
- 405
- Avg merge
- 2d 43m
- Merged PRs (30d)
- 8
Description
Feature description
Infoblox provides a service, "TIDE" (Infoblox Threat Intelligence Data Exchange), which allows BloxOne Threat Defence customers to query indicators, including domains, IPs, URLs, email addresses and file hashes. An cortex analyzer for Infoblox TIDE would be very useful for cortex users who are also infoblox customers.
Describe the solution you'd like
Create a cortex analyzer which queries Infoblox's TIDE (Threat Intelligence Data Exchange).
Additional context
More information about Infoblox TIDE:
Infoblox TIDE User Guide
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the Infoblox TIDE User Guide linked in the issue, then inspect the repository's existing analyzer structure and conventions. The work is complete when a Cortex analyzer can query TIDE for the listed indicator types and integrates with the project's analyzer expectations; the issue names no specific files or tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100