intelmq.bots.experts.national_cert_contact_certat package¶
Submodules¶
intelmq.bots.experts.national_cert_contact_certat.expert module¶
CERT.at geolocate the national CERT abuse service https://contacts.cert.at/cgi-bin/abuse-nationalcert.pl
HTTP GET: https://contacts.cert.at/cgi-bin/abuse-nationalcert.pl?ip=1.2.3.4 HTTP POST: https://contacts.cert.at/cgi-bin/abuse-nationalcert.pl
Options: &bShowNationalCERT=on Show national CERT contact info &bShowHeader=on Display a CSV header &bVerbose=on Display the source of the data, and other information &bFilter=off Act as a filter: only show lines which geolocate to “AT” &bKeepLoglines=off Keep original log lines (separated by “#”) &sep={TAB, comma, semicolon, pipe} Separator for the (output) CSV format
- intelmq.bots.experts.national_cert_contact_certat.expert.BOT¶
alias of
NationalCERTContactCertATExpertBot
- class intelmq.bots.experts.national_cert_contact_certat.expert.NationalCERTContactCertATExpertBot(*args, **kwargs)¶
Bases:
ExpertBot
Add country and abuse contact information from the CERT.at national CERT Contact Database. Set filter to true if you want to filter out events for Austria. Set overwrite_cc to true if you want to overwrite an existing country code value
- filter: bool = False¶
- http_verify_cert: bool = True¶
- init()¶
- overwrite_cc: bool = False¶
- process()¶