TheHive-Project / TheHive-Project/Cortex-Analyzers
[FR] Infoblox Dossier analyzer
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 490
- Forks
- 405
- Avg merge
- 2d 43m
- Merged PRs (30d)
- 8
Description
Feature description
Infoblox provides a service, "Dossier" , which allows BloxOne Threat Defence customers to query indicators against Infoblox threat intelligence.
Infoblox Dossier™ is a threat investigation research tool providing immediate contextual information on malicious threats delivered from multiple sources, including TIDE, delivered simultaneously. Dossier empowers you to make security decisions more quickly and with greater confidence. API access to Dossier is also provided to enrich your SIEM and security tools.
An cortex analyzer for Infoblox Dossier would be very useful for cortex users who are also infoblox customers
Describe the solution you'd like
Create a cortex analyzer which queries Infoblox Dossier.
Additional context
Infoblox Dossier User Guide
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the linked Infoblox Dossier User Guide to determine the API access, authentication, supported indicators, and response data. Then review existing Cortex analyzers for the expected integration shape. Done means a Cortex analyzer can query Infoblox Dossier and return useful threat-intelligence context.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100