intelmq.bots.parsers.fraunhofer package


intelmq.bots.parsers.fraunhofer.parser_dga module

The source provides a JSON file with a dictionary. The keys of this dict are identifiers and the values are lists of domains.

The first part of the identifiers, before the first underscore, can be treated as malware name. The feed provider committed to retain this schema.

An overview of all names can be found here:

class intelmq.bots.parsers.fraunhofer.parser_dga.FraunhoferDGAParserBot(bot_id: str, start: bool = False, sighup_event=None, disable_multithreading: Optional[bool] = None)


Parse the Fraunhofer DGA feed


Module contents