intelmq.bots.parsers.fraunhofer package

Submodules

intelmq.bots.parsers.fraunhofer.parser_dga module

The source provides a JSON file with a dictionary. The keys of this dict are identifiers and the values are lists of domains.

The first part of the identifiers, before the first underscore, can be treated as malware name. The feed provider committed to retain this schema.

An overview of all names can be found here: https://dgarchive.caad.fkie.fraunhofer.de/pcres

class intelmq.bots.parsers.fraunhofer.parser_dga.FraunhoferDGAParserBot(bot_id: str, start: bool = False, sighup_event=None, disable_multithreading: Optional[bool] = None)

Bases: intelmq.lib.bot.Bot

Parse the Fraunhofer DGA feed

process()

Module contents