threatinator-amqp-rcvr 0.1.1 → 0.1.2
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 0459c8847cc97aca9eedaed9790362e87305e27d
|
|
4
|
+
data.tar.gz: 54ded0c3c51f339248424730d1355eeddd2a728c
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: df97d96318888c31a1d27eda577c8a97f2a95a32b52dfd10ef527c584e133060a31557269de9ce3efdcc57d8927a7efe3b501818d0ab39e420bcdb606920069f
|
|
7
|
+
data.tar.gz: 8bee13bf735effc209a62b71df8fd1d644589193115594c74a15bb93ee089ebbb3b5148cfd4fd61abd718916d3f9793fa2e44f9b0214879d2fe47dff455d4c9f
|
|
@@ -49,7 +49,7 @@ module Threatinator
|
|
|
49
49
|
Threatinator::Amqp::Rcvr::Settings.amqp_binding_topic = value
|
|
50
50
|
end
|
|
51
51
|
|
|
52
|
-
opt.on("-R", "--amqp-routekey=", "AMQP Routekey","
|
|
52
|
+
opt.on("-R", "--amqp-routekey=", "AMQP Routekey","Default: #{Threatinator::Amqp::Rcvr::Settings.amqp_routing_key}", "[#, threatinator.#, threatinator.c2, threatinator.attacker, threatinator.malware_host, threatinator.spamming, threatinator.scanning, threatinator.phishing]") do |value|
|
|
53
53
|
Threatinator::Amqp::Rcvr::Settings.amqp_routing_key = value
|
|
54
54
|
end
|
|
55
55
|
|
|
@@ -43,12 +43,18 @@ module Threatinator
|
|
|
43
43
|
@@registered_settings
|
|
44
44
|
end
|
|
45
45
|
|
|
46
|
+
# Threatinator uses "threatinator." + event.type.to_s
|
|
47
|
+
# VALID_TYPES = [:c2, :attacker, :malware_host, :spamming, :scanning, :phishing]
|
|
48
|
+
# amqp_routing_key :routing_key=>"threatinator.malware_host"
|
|
49
|
+
# '*' (star) can substitute for exactly one word.
|
|
50
|
+
# '#' (hash) can substitute for zero or more words.
|
|
51
|
+
|
|
46
52
|
def self.reset!
|
|
47
53
|
self.config do
|
|
48
54
|
verbose false
|
|
49
55
|
amqp_hostname "127.0.0.1"
|
|
50
56
|
amqp_binding_topic "threats"
|
|
51
|
-
amqp_routing_key "
|
|
57
|
+
amqp_routing_key "threatinator.#"
|
|
52
58
|
sql_table_name "fqdns"
|
|
53
59
|
sql_file_location "/tmp/threat.db"
|
|
54
60
|
end
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: threatinator-amqp-rcvr
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.1.
|
|
4
|
+
version: 0.1.2
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- shadowbq
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: exe
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2016-10-
|
|
11
|
+
date: 2016-10-31 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: bunny
|
|
@@ -183,7 +183,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
183
183
|
version: '0'
|
|
184
184
|
requirements: []
|
|
185
185
|
rubyforge_project:
|
|
186
|
-
rubygems_version: 2.
|
|
186
|
+
rubygems_version: 2.4.8
|
|
187
187
|
signing_key:
|
|
188
188
|
specification_version: 4
|
|
189
189
|
summary: Ruby AMQP Threatinator receiver
|