threatinator 0.1.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (219) hide show
  1. checksums.yaml +7 -0
  2. data/CHANGELOG.md +23 -0
  3. data/CONTRIBUTING.md +119 -0
  4. data/Gemfile +28 -0
  5. data/LICENSE +165 -0
  6. data/README.md +45 -0
  7. data/Rakefile +45 -0
  8. data/VERSION +1 -0
  9. data/bin/threatinator +5 -0
  10. data/lib/threatinator.rb +3 -0
  11. data/lib/threatinator/action.rb +14 -0
  12. data/lib/threatinator/actions/list.rb +2 -0
  13. data/lib/threatinator/actions/list/action.rb +53 -0
  14. data/lib/threatinator/actions/list/config.rb +10 -0
  15. data/lib/threatinator/actions/run.rb +2 -0
  16. data/lib/threatinator/actions/run/action.rb +45 -0
  17. data/lib/threatinator/actions/run/config.rb +32 -0
  18. data/lib/threatinator/actions/run/coverage_observer.rb +54 -0
  19. data/lib/threatinator/actions/run/output_config.rb +59 -0
  20. data/lib/threatinator/cli.rb +13 -0
  21. data/lib/threatinator/cli/action_builder.rb +33 -0
  22. data/lib/threatinator/cli/list_action_builder.rb +19 -0
  23. data/lib/threatinator/cli/parser.rb +113 -0
  24. data/lib/threatinator/cli/run_action_builder.rb +41 -0
  25. data/lib/threatinator/config.rb +6 -0
  26. data/lib/threatinator/config/base.rb +35 -0
  27. data/lib/threatinator/config/feed_search.rb +25 -0
  28. data/lib/threatinator/decoder.rb +24 -0
  29. data/lib/threatinator/decoders/gzip.rb +30 -0
  30. data/lib/threatinator/event.rb +27 -0
  31. data/lib/threatinator/event_builder.rb +41 -0
  32. data/lib/threatinator/exceptions.rb +61 -0
  33. data/lib/threatinator/feed.rb +82 -0
  34. data/lib/threatinator/feed_builder.rb +156 -0
  35. data/lib/threatinator/feed_registry.rb +47 -0
  36. data/lib/threatinator/feed_runner.rb +118 -0
  37. data/lib/threatinator/fetcher.rb +22 -0
  38. data/lib/threatinator/fetchers/http.rb +46 -0
  39. data/lib/threatinator/filter.rb +12 -0
  40. data/lib/threatinator/filters/block.rb +18 -0
  41. data/lib/threatinator/filters/comments.rb +16 -0
  42. data/lib/threatinator/filters/whitespace.rb +19 -0
  43. data/lib/threatinator/output.rb +50 -0
  44. data/lib/threatinator/parser.rb +23 -0
  45. data/lib/threatinator/parsers/csv.rb +7 -0
  46. data/lib/threatinator/parsers/csv/parser.rb +77 -0
  47. data/lib/threatinator/parsers/getline.rb +8 -0
  48. data/lib/threatinator/parsers/getline/parser.rb +45 -0
  49. data/lib/threatinator/parsers/json.rb +8 -0
  50. data/lib/threatinator/parsers/json/adapters/oj.rb +65 -0
  51. data/lib/threatinator/parsers/json/parser.rb +45 -0
  52. data/lib/threatinator/parsers/json/record.rb +20 -0
  53. data/lib/threatinator/parsers/xml.rb +8 -0
  54. data/lib/threatinator/parsers/xml/node.rb +79 -0
  55. data/lib/threatinator/parsers/xml/node_builder.rb +39 -0
  56. data/lib/threatinator/parsers/xml/parser.rb +44 -0
  57. data/lib/threatinator/parsers/xml/path.rb +70 -0
  58. data/lib/threatinator/parsers/xml/pattern.rb +53 -0
  59. data/lib/threatinator/parsers/xml/record.rb +14 -0
  60. data/lib/threatinator/parsers/xml/sax_document.rb +64 -0
  61. data/lib/threatinator/plugin_loader.rb +115 -0
  62. data/lib/threatinator/plugins/output/csv.rb +47 -0
  63. data/lib/threatinator/plugins/output/null.rb +17 -0
  64. data/lib/threatinator/plugins/output/rubydebug.rb +16 -0
  65. data/lib/threatinator/property_definer.rb +101 -0
  66. data/lib/threatinator/record.rb +22 -0
  67. data/lib/threatinator/registry.rb +53 -0
  68. data/lib/threatinator/util.rb +15 -0
  69. data/spec/feeds/ET_compromised-ip_reputation_spec.rb +50 -0
  70. data/spec/feeds/alienvault-ip_reputation_spec.rb +50 -0
  71. data/spec/feeds/arbor_fastflux-domain_reputation_spec.rb +50 -0
  72. data/spec/feeds/arbor_ssh-ip_reputation_spec.rb +50 -0
  73. data/spec/feeds/autoshun_shunlist_spec.rb +42 -0
  74. data/spec/feeds/blocklist_de_apache-ip_reputation_spec.rb +50 -0
  75. data/spec/feeds/blocklist_de_bots-ip_reputation_spec.rb +50 -0
  76. data/spec/feeds/blocklist_de_ftp-ip_reputation_spec.rb +50 -0
  77. data/spec/feeds/blocklist_de_imap-ip_reputation_spec.rb +50 -0
  78. data/spec/feeds/blocklist_de_pop3-ip_reputation_spec.rb +50 -0
  79. data/spec/feeds/blocklist_de_proftpd-ip_reputation_spec.rb +50 -0
  80. data/spec/feeds/blocklist_de_sip-ip_reputation_spec.rb +50 -0
  81. data/spec/feeds/blocklist_de_ssh-ip_reputation_spec.rb +50 -0
  82. data/spec/feeds/blocklist_de_strongips-ip_reputation_spec.rb +50 -0
  83. data/spec/feeds/ciarmy-ip_reputation_spec.rb +50 -0
  84. data/spec/feeds/cruzit-ip_reputation_spec.rb +50 -0
  85. data/spec/feeds/dan_me_uk_torlist-ip_reputation_spec.rb +50 -0
  86. data/spec/feeds/data/ET_compromised-ip_reputation.txt +11 -0
  87. data/spec/feeds/data/alienvault-ip_reputation.txt +18 -0
  88. data/spec/feeds/data/arbor_domainlist.txt +11 -0
  89. data/spec/feeds/data/arbor_ssh.txt +16 -0
  90. data/spec/feeds/data/autoshun_shunlist.csv +20 -0
  91. data/spec/feeds/data/blocklist_de_apache-ip-reputation.txt +17 -0
  92. data/spec/feeds/data/blocklist_de_bots-ip-reputation.txt +15 -0
  93. data/spec/feeds/data/blocklist_de_ftp-ip-reputation.txt +7 -0
  94. data/spec/feeds/data/blocklist_de_imap-ip-reputation.txt +8 -0
  95. data/spec/feeds/data/blocklist_de_pop3-ip-reputation.txt +11 -0
  96. data/spec/feeds/data/blocklist_de_proftpd-ip-reputation.txt +12 -0
  97. data/spec/feeds/data/blocklist_de_sip-ip-reputation.txt +9 -0
  98. data/spec/feeds/data/blocklist_de_ssh-ip-reputation.txt +10 -0
  99. data/spec/feeds/data/blocklist_de_strongips-ip-reputation.txt +11 -0
  100. data/spec/feeds/data/ciarmy-ip-reputation.txt +11 -0
  101. data/spec/feeds/data/cruzit-ip-reputation.txt +14 -0
  102. data/spec/feeds/data/dan_me_uk_torlist-ip-reputation.txt +11 -0
  103. data/spec/feeds/data/dshield_topattackers.xml +4 -0
  104. data/spec/feeds/data/feodo_domainlist.txt +18 -0
  105. data/spec/feeds/data/feodo_iplist.txt +20 -0
  106. data/spec/feeds/data/infiltrated_iplist.txt +16 -0
  107. data/spec/feeds/data/malc0de_domainlist.txt +18 -0
  108. data/spec/feeds/data/malc0de_iplist.txt +14 -0
  109. data/spec/feeds/data/mirc_domainlist.txt +31 -0
  110. data/spec/feeds/data/nothink_irc_iplist.txt +14 -0
  111. data/spec/feeds/data/nothink_ssh_iplist.txt +10 -0
  112. data/spec/feeds/data/openbl_iplist.txt +12 -0
  113. data/spec/feeds/data/palevo_domainlist.txt +25 -0
  114. data/spec/feeds/data/palevo_iplist.txt +24 -0
  115. data/spec/feeds/data/phishtank-sample.json.gz +0 -0
  116. data/spec/feeds/data/spyeye_domainlist.txt +16 -0
  117. data/spec/feeds/data/spyeye_iplist.txt +19 -0
  118. data/spec/feeds/data/t-arend-de_ssh_iplist.txt +17 -0
  119. data/spec/feeds/data/the_haleys_ssh_iplist.txt +12 -0
  120. data/spec/feeds/data/yourcmc_ssh-ip_reputation.txt +27 -0
  121. data/spec/feeds/data/zeus-ip_reputation.txt +285 -0
  122. data/spec/feeds/data/zeus_domainlist.txt +27 -0
  123. data/spec/feeds/dshield_attackers-top1000_spec.rb +43 -0
  124. data/spec/feeds/feodo-domain_reputation_spec.rb +50 -0
  125. data/spec/feeds/feodo-ip_reputation_spec.rb +50 -0
  126. data/spec/feeds/infiltrated-ip_reputation_spec.rb +50 -0
  127. data/spec/feeds/malc0de-domain_reputation_spec.rb +50 -0
  128. data/spec/feeds/malc0de-ip_reputation_spec.rb +50 -0
  129. data/spec/feeds/mirc-domain_reputation_spec.rb +50 -0
  130. data/spec/feeds/nothink_irc-ip_reputation_spec.rb +50 -0
  131. data/spec/feeds/nothink_ssh-ip_reputation_spec.rb +50 -0
  132. data/spec/feeds/openbl-ip_reputation_spec.rb +50 -0
  133. data/spec/feeds/palevo-domain_reputation_spec.rb +50 -0
  134. data/spec/feeds/palevo-ip_reputation_spec.rb +50 -0
  135. data/spec/feeds/phishtank_spec.rb +45 -0
  136. data/spec/feeds/spyeye-domain_reputation_spec.rb +50 -0
  137. data/spec/feeds/spyeye-ip_reputation_spec.rb +50 -0
  138. data/spec/feeds/t-arend-de_ssh-ip_reputation_spec.rb +50 -0
  139. data/spec/feeds/the_haleys_ssh-ip_reputation_spec.rb +50 -0
  140. data/spec/feeds/yourcmc_ssh-ip_reputation_spec.rb +50 -0
  141. data/spec/feeds/zeus-domain_reputation_spec.rb +50 -0
  142. data/spec/feeds/zeus-ip_reputation_spec.rb +50 -0
  143. data/spec/fixtures/feed/provider1/feed1.feed +6 -0
  144. data/spec/fixtures/parsers/test.xml +13 -0
  145. data/spec/fixtures/parsers/test_self_closing.xml +20 -0
  146. data/spec/fixtures/plugins/bad/threatinator/plugins/test_error1/plugin.rb +1 -0
  147. data/spec/fixtures/plugins/bad/threatinator/plugins/test_missing1/plugin.rb +0 -0
  148. data/spec/fixtures/plugins/fake.rb +19 -0
  149. data/spec/fixtures/plugins/good/threatinator/plugins/test_type1/plugin_a.rb +8 -0
  150. data/spec/fixtures/plugins/good/threatinator/plugins/test_type1/plugin_b.rb +8 -0
  151. data/spec/fixtures/plugins/good/threatinator/plugins/test_type2/plugin_c.rb +8 -0
  152. data/spec/fixtures/plugins/good/threatinator/plugins/test_type2/plugin_d.rb +8 -0
  153. data/spec/fixtures/plugins/good/threatinator/plugins/test_type3/plugin_e.rb +8 -0
  154. data/spec/fixtures/plugins/good/threatinator/plugins/test_type3/plugin_f.rb +8 -0
  155. data/spec/spec_helper.rb +52 -0
  156. data/spec/support/bad_feeds/missing_fetcher.feed +7 -0
  157. data/spec/support/bad_feeds/missing_name.feed +6 -0
  158. data/spec/support/bad_feeds/missing_parser.feed +3 -0
  159. data/spec/support/bad_feeds/missing_provider.feed +5 -0
  160. data/spec/support/factories/event.rb +27 -0
  161. data/spec/support/factories/feed.rb +32 -0
  162. data/spec/support/factories/feed_builder.rb +65 -0
  163. data/spec/support/factories/feed_registry.rb +8 -0
  164. data/spec/support/factories/output.rb +11 -0
  165. data/spec/support/factories/record.rb +17 -0
  166. data/spec/support/factories/xml_node.rb +33 -0
  167. data/spec/support/helpers/io.rb +11 -0
  168. data/spec/support/helpers/models.rb +13 -0
  169. data/spec/support/shared/action_builder.rb +47 -0
  170. data/spec/support/shared/decoder.rb +70 -0
  171. data/spec/support/shared/feeds.rb +218 -0
  172. data/spec/support/shared/fetcher.rb +48 -0
  173. data/spec/support/shared/filter.rb +14 -0
  174. data/spec/support/shared/io-like.rb +7 -0
  175. data/spec/support/shared/output.rb +120 -0
  176. data/spec/support/shared/parsers.rb +51 -0
  177. data/spec/support/shared/record.rb +111 -0
  178. data/spec/threatinator/actions/list/action_spec.rb +93 -0
  179. data/spec/threatinator/actions/run/action_spec.rb +89 -0
  180. data/spec/threatinator/actions/run/config_spec.rb +39 -0
  181. data/spec/threatinator/actions/run/coverage_observer_spec.rb +116 -0
  182. data/spec/threatinator/actions/run/output_config_spec.rb +89 -0
  183. data/spec/threatinator/cli/list_action_builder_spec.rb +57 -0
  184. data/spec/threatinator/cli/run_action_builder_spec.rb +133 -0
  185. data/spec/threatinator/cli_spec.rb +175 -0
  186. data/spec/threatinator/config/base_spec.rb +39 -0
  187. data/spec/threatinator/config/feed_search_spec.rb +76 -0
  188. data/spec/threatinator/decoders/gzip_spec.rb +75 -0
  189. data/spec/threatinator/event_builder_spec.rb +33 -0
  190. data/spec/threatinator/event_spec.rb +30 -0
  191. data/spec/threatinator/feed_builder_spec.rb +636 -0
  192. data/spec/threatinator/feed_registry_spec.rb +198 -0
  193. data/spec/threatinator/feed_runner_spec.rb +155 -0
  194. data/spec/threatinator/feed_spec.rb +169 -0
  195. data/spec/threatinator/fetcher_spec.rb +12 -0
  196. data/spec/threatinator/fetchers/http_spec.rb +32 -0
  197. data/spec/threatinator/filter_spec.rb +13 -0
  198. data/spec/threatinator/filters/block_spec.rb +16 -0
  199. data/spec/threatinator/filters/comments_spec.rb +13 -0
  200. data/spec/threatinator/filters/whitespace_spec.rb +12 -0
  201. data/spec/threatinator/parser_spec.rb +13 -0
  202. data/spec/threatinator/parsers/csv/parser_spec.rb +202 -0
  203. data/spec/threatinator/parsers/getline/parser_spec.rb +83 -0
  204. data/spec/threatinator/parsers/json/parser_spec.rb +106 -0
  205. data/spec/threatinator/parsers/json/record_spec.rb +30 -0
  206. data/spec/threatinator/parsers/xml/node_spec.rb +335 -0
  207. data/spec/threatinator/parsers/xml/parser_spec.rb +263 -0
  208. data/spec/threatinator/parsers/xml/path_spec.rb +209 -0
  209. data/spec/threatinator/parsers/xml/pattern_spec.rb +72 -0
  210. data/spec/threatinator/parsers/xml/record_spec.rb +27 -0
  211. data/spec/threatinator/plugin_loader_spec.rb +238 -0
  212. data/spec/threatinator/plugins/output/csv_spec.rb +46 -0
  213. data/spec/threatinator/plugins/output/null_spec.rb +17 -0
  214. data/spec/threatinator/plugins/output/rubydebug_spec.rb +37 -0
  215. data/spec/threatinator/property_definer_spec.rb +155 -0
  216. data/spec/threatinator/record_spec.rb +19 -0
  217. data/spec/threatinator/registry_spec.rb +97 -0
  218. data/spec/threatinator/runner_spec.rb +273 -0
  219. metadata +376 -0
metadata ADDED
@@ -0,0 +1,376 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: threatinator
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.1.1
5
+ platform: ruby
6
+ authors:
7
+ - Mike Ryan
8
+ - Pierre Lamy
9
+ autorequire:
10
+ bindir: bin
11
+ cert_chain: []
12
+ date: 2014-08-28 00:00:00.000000000 Z
13
+ dependencies:
14
+ - !ruby/object:Gem::Dependency
15
+ name: typhoeus
16
+ requirement: !ruby/object:Gem::Requirement
17
+ requirements:
18
+ - - "~>"
19
+ - !ruby/object:Gem::Version
20
+ version: '0.6'
21
+ type: :runtime
22
+ prerelease: false
23
+ version_requirements: !ruby/object:Gem::Requirement
24
+ requirements:
25
+ - - "~>"
26
+ - !ruby/object:Gem::Version
27
+ version: '0.6'
28
+ - !ruby/object:Gem::Dependency
29
+ name: nokogiri
30
+ requirement: !ruby/object:Gem::Requirement
31
+ requirements:
32
+ - - "~>"
33
+ - !ruby/object:Gem::Version
34
+ version: '1.6'
35
+ type: :runtime
36
+ prerelease: false
37
+ version_requirements: !ruby/object:Gem::Requirement
38
+ requirements:
39
+ - - "~>"
40
+ - !ruby/object:Gem::Version
41
+ version: '1.6'
42
+ - !ruby/object:Gem::Dependency
43
+ name: docile
44
+ requirement: !ruby/object:Gem::Requirement
45
+ requirements:
46
+ - - "~>"
47
+ - !ruby/object:Gem::Version
48
+ version: '1.1'
49
+ type: :runtime
50
+ prerelease: false
51
+ version_requirements: !ruby/object:Gem::Requirement
52
+ requirements:
53
+ - - "~>"
54
+ - !ruby/object:Gem::Version
55
+ version: '1.1'
56
+ - !ruby/object:Gem::Dependency
57
+ name: virtus
58
+ requirement: !ruby/object:Gem::Requirement
59
+ requirements:
60
+ - - "~>"
61
+ - !ruby/object:Gem::Version
62
+ version: '1.0'
63
+ type: :runtime
64
+ prerelease: false
65
+ version_requirements: !ruby/object:Gem::Requirement
66
+ requirements:
67
+ - - "~>"
68
+ - !ruby/object:Gem::Version
69
+ version: '1.0'
70
+ - !ruby/object:Gem::Dependency
71
+ name: gli
72
+ requirement: !ruby/object:Gem::Requirement
73
+ requirements:
74
+ - - "~>"
75
+ - !ruby/object:Gem::Version
76
+ version: '2.12'
77
+ type: :runtime
78
+ prerelease: false
79
+ version_requirements: !ruby/object:Gem::Requirement
80
+ requirements:
81
+ - - "~>"
82
+ - !ruby/object:Gem::Version
83
+ version: '2.12'
84
+ - !ruby/object:Gem::Dependency
85
+ name: oj
86
+ requirement: !ruby/object:Gem::Requirement
87
+ requirements:
88
+ - - "~>"
89
+ - !ruby/object:Gem::Version
90
+ version: '2.9'
91
+ type: :runtime
92
+ prerelease: false
93
+ version_requirements: !ruby/object:Gem::Requirement
94
+ requirements:
95
+ - - "~>"
96
+ - !ruby/object:Gem::Version
97
+ version: '2.9'
98
+ - !ruby/object:Gem::Dependency
99
+ name: jeweler
100
+ requirement: !ruby/object:Gem::Requirement
101
+ requirements:
102
+ - - "~>"
103
+ - !ruby/object:Gem::Version
104
+ version: '2'
105
+ type: :development
106
+ prerelease: false
107
+ version_requirements: !ruby/object:Gem::Requirement
108
+ requirements:
109
+ - - "~>"
110
+ - !ruby/object:Gem::Version
111
+ version: '2'
112
+ - !ruby/object:Gem::Dependency
113
+ name: pry
114
+ requirement: !ruby/object:Gem::Requirement
115
+ requirements:
116
+ - - "~>"
117
+ - !ruby/object:Gem::Version
118
+ version: '0.10'
119
+ type: :development
120
+ prerelease: false
121
+ version_requirements: !ruby/object:Gem::Requirement
122
+ requirements:
123
+ - - "~>"
124
+ - !ruby/object:Gem::Version
125
+ version: '0.10'
126
+ description: Threatinator is a library and tool for parsing threat data feeds.
127
+ email: falter@gmail.com
128
+ executables:
129
+ - threatinator
130
+ extensions: []
131
+ extra_rdoc_files:
132
+ - LICENSE
133
+ - README.md
134
+ files:
135
+ - CHANGELOG.md
136
+ - CONTRIBUTING.md
137
+ - Gemfile
138
+ - LICENSE
139
+ - README.md
140
+ - Rakefile
141
+ - VERSION
142
+ - bin/threatinator
143
+ - lib/threatinator.rb
144
+ - lib/threatinator/action.rb
145
+ - lib/threatinator/actions/list.rb
146
+ - lib/threatinator/actions/list/action.rb
147
+ - lib/threatinator/actions/list/config.rb
148
+ - lib/threatinator/actions/run.rb
149
+ - lib/threatinator/actions/run/action.rb
150
+ - lib/threatinator/actions/run/config.rb
151
+ - lib/threatinator/actions/run/coverage_observer.rb
152
+ - lib/threatinator/actions/run/output_config.rb
153
+ - lib/threatinator/cli.rb
154
+ - lib/threatinator/cli/action_builder.rb
155
+ - lib/threatinator/cli/list_action_builder.rb
156
+ - lib/threatinator/cli/parser.rb
157
+ - lib/threatinator/cli/run_action_builder.rb
158
+ - lib/threatinator/config.rb
159
+ - lib/threatinator/config/base.rb
160
+ - lib/threatinator/config/feed_search.rb
161
+ - lib/threatinator/decoder.rb
162
+ - lib/threatinator/decoders/gzip.rb
163
+ - lib/threatinator/event.rb
164
+ - lib/threatinator/event_builder.rb
165
+ - lib/threatinator/exceptions.rb
166
+ - lib/threatinator/feed.rb
167
+ - lib/threatinator/feed_builder.rb
168
+ - lib/threatinator/feed_registry.rb
169
+ - lib/threatinator/feed_runner.rb
170
+ - lib/threatinator/fetcher.rb
171
+ - lib/threatinator/fetchers/http.rb
172
+ - lib/threatinator/filter.rb
173
+ - lib/threatinator/filters/block.rb
174
+ - lib/threatinator/filters/comments.rb
175
+ - lib/threatinator/filters/whitespace.rb
176
+ - lib/threatinator/output.rb
177
+ - lib/threatinator/parser.rb
178
+ - lib/threatinator/parsers/csv.rb
179
+ - lib/threatinator/parsers/csv/parser.rb
180
+ - lib/threatinator/parsers/getline.rb
181
+ - lib/threatinator/parsers/getline/parser.rb
182
+ - lib/threatinator/parsers/json.rb
183
+ - lib/threatinator/parsers/json/adapters/oj.rb
184
+ - lib/threatinator/parsers/json/parser.rb
185
+ - lib/threatinator/parsers/json/record.rb
186
+ - lib/threatinator/parsers/xml.rb
187
+ - lib/threatinator/parsers/xml/node.rb
188
+ - lib/threatinator/parsers/xml/node_builder.rb
189
+ - lib/threatinator/parsers/xml/parser.rb
190
+ - lib/threatinator/parsers/xml/path.rb
191
+ - lib/threatinator/parsers/xml/pattern.rb
192
+ - lib/threatinator/parsers/xml/record.rb
193
+ - lib/threatinator/parsers/xml/sax_document.rb
194
+ - lib/threatinator/plugin_loader.rb
195
+ - lib/threatinator/plugins/output/csv.rb
196
+ - lib/threatinator/plugins/output/null.rb
197
+ - lib/threatinator/plugins/output/rubydebug.rb
198
+ - lib/threatinator/property_definer.rb
199
+ - lib/threatinator/record.rb
200
+ - lib/threatinator/registry.rb
201
+ - lib/threatinator/util.rb
202
+ - spec/feeds/ET_compromised-ip_reputation_spec.rb
203
+ - spec/feeds/alienvault-ip_reputation_spec.rb
204
+ - spec/feeds/arbor_fastflux-domain_reputation_spec.rb
205
+ - spec/feeds/arbor_ssh-ip_reputation_spec.rb
206
+ - spec/feeds/autoshun_shunlist_spec.rb
207
+ - spec/feeds/blocklist_de_apache-ip_reputation_spec.rb
208
+ - spec/feeds/blocklist_de_bots-ip_reputation_spec.rb
209
+ - spec/feeds/blocklist_de_ftp-ip_reputation_spec.rb
210
+ - spec/feeds/blocklist_de_imap-ip_reputation_spec.rb
211
+ - spec/feeds/blocklist_de_pop3-ip_reputation_spec.rb
212
+ - spec/feeds/blocklist_de_proftpd-ip_reputation_spec.rb
213
+ - spec/feeds/blocklist_de_sip-ip_reputation_spec.rb
214
+ - spec/feeds/blocklist_de_ssh-ip_reputation_spec.rb
215
+ - spec/feeds/blocklist_de_strongips-ip_reputation_spec.rb
216
+ - spec/feeds/ciarmy-ip_reputation_spec.rb
217
+ - spec/feeds/cruzit-ip_reputation_spec.rb
218
+ - spec/feeds/dan_me_uk_torlist-ip_reputation_spec.rb
219
+ - spec/feeds/data/ET_compromised-ip_reputation.txt
220
+ - spec/feeds/data/alienvault-ip_reputation.txt
221
+ - spec/feeds/data/arbor_domainlist.txt
222
+ - spec/feeds/data/arbor_ssh.txt
223
+ - spec/feeds/data/autoshun_shunlist.csv
224
+ - spec/feeds/data/blocklist_de_apache-ip-reputation.txt
225
+ - spec/feeds/data/blocklist_de_bots-ip-reputation.txt
226
+ - spec/feeds/data/blocklist_de_ftp-ip-reputation.txt
227
+ - spec/feeds/data/blocklist_de_imap-ip-reputation.txt
228
+ - spec/feeds/data/blocklist_de_pop3-ip-reputation.txt
229
+ - spec/feeds/data/blocklist_de_proftpd-ip-reputation.txt
230
+ - spec/feeds/data/blocklist_de_sip-ip-reputation.txt
231
+ - spec/feeds/data/blocklist_de_ssh-ip-reputation.txt
232
+ - spec/feeds/data/blocklist_de_strongips-ip-reputation.txt
233
+ - spec/feeds/data/ciarmy-ip-reputation.txt
234
+ - spec/feeds/data/cruzit-ip-reputation.txt
235
+ - spec/feeds/data/dan_me_uk_torlist-ip-reputation.txt
236
+ - spec/feeds/data/dshield_topattackers.xml
237
+ - spec/feeds/data/feodo_domainlist.txt
238
+ - spec/feeds/data/feodo_iplist.txt
239
+ - spec/feeds/data/infiltrated_iplist.txt
240
+ - spec/feeds/data/malc0de_domainlist.txt
241
+ - spec/feeds/data/malc0de_iplist.txt
242
+ - spec/feeds/data/mirc_domainlist.txt
243
+ - spec/feeds/data/nothink_irc_iplist.txt
244
+ - spec/feeds/data/nothink_ssh_iplist.txt
245
+ - spec/feeds/data/openbl_iplist.txt
246
+ - spec/feeds/data/palevo_domainlist.txt
247
+ - spec/feeds/data/palevo_iplist.txt
248
+ - spec/feeds/data/phishtank-sample.json.gz
249
+ - spec/feeds/data/spyeye_domainlist.txt
250
+ - spec/feeds/data/spyeye_iplist.txt
251
+ - spec/feeds/data/t-arend-de_ssh_iplist.txt
252
+ - spec/feeds/data/the_haleys_ssh_iplist.txt
253
+ - spec/feeds/data/yourcmc_ssh-ip_reputation.txt
254
+ - spec/feeds/data/zeus-ip_reputation.txt
255
+ - spec/feeds/data/zeus_domainlist.txt
256
+ - spec/feeds/dshield_attackers-top1000_spec.rb
257
+ - spec/feeds/feodo-domain_reputation_spec.rb
258
+ - spec/feeds/feodo-ip_reputation_spec.rb
259
+ - spec/feeds/infiltrated-ip_reputation_spec.rb
260
+ - spec/feeds/malc0de-domain_reputation_spec.rb
261
+ - spec/feeds/malc0de-ip_reputation_spec.rb
262
+ - spec/feeds/mirc-domain_reputation_spec.rb
263
+ - spec/feeds/nothink_irc-ip_reputation_spec.rb
264
+ - spec/feeds/nothink_ssh-ip_reputation_spec.rb
265
+ - spec/feeds/openbl-ip_reputation_spec.rb
266
+ - spec/feeds/palevo-domain_reputation_spec.rb
267
+ - spec/feeds/palevo-ip_reputation_spec.rb
268
+ - spec/feeds/phishtank_spec.rb
269
+ - spec/feeds/spyeye-domain_reputation_spec.rb
270
+ - spec/feeds/spyeye-ip_reputation_spec.rb
271
+ - spec/feeds/t-arend-de_ssh-ip_reputation_spec.rb
272
+ - spec/feeds/the_haleys_ssh-ip_reputation_spec.rb
273
+ - spec/feeds/yourcmc_ssh-ip_reputation_spec.rb
274
+ - spec/feeds/zeus-domain_reputation_spec.rb
275
+ - spec/feeds/zeus-ip_reputation_spec.rb
276
+ - spec/fixtures/feed/provider1/feed1.feed
277
+ - spec/fixtures/parsers/test.xml
278
+ - spec/fixtures/parsers/test_self_closing.xml
279
+ - spec/fixtures/plugins/bad/threatinator/plugins/test_error1/plugin.rb
280
+ - spec/fixtures/plugins/bad/threatinator/plugins/test_missing1/plugin.rb
281
+ - spec/fixtures/plugins/fake.rb
282
+ - spec/fixtures/plugins/good/threatinator/plugins/test_type1/plugin_a.rb
283
+ - spec/fixtures/plugins/good/threatinator/plugins/test_type1/plugin_b.rb
284
+ - spec/fixtures/plugins/good/threatinator/plugins/test_type2/plugin_c.rb
285
+ - spec/fixtures/plugins/good/threatinator/plugins/test_type2/plugin_d.rb
286
+ - spec/fixtures/plugins/good/threatinator/plugins/test_type3/plugin_e.rb
287
+ - spec/fixtures/plugins/good/threatinator/plugins/test_type3/plugin_f.rb
288
+ - spec/spec_helper.rb
289
+ - spec/support/bad_feeds/missing_fetcher.feed
290
+ - spec/support/bad_feeds/missing_name.feed
291
+ - spec/support/bad_feeds/missing_parser.feed
292
+ - spec/support/bad_feeds/missing_provider.feed
293
+ - spec/support/factories/event.rb
294
+ - spec/support/factories/feed.rb
295
+ - spec/support/factories/feed_builder.rb
296
+ - spec/support/factories/feed_registry.rb
297
+ - spec/support/factories/output.rb
298
+ - spec/support/factories/record.rb
299
+ - spec/support/factories/xml_node.rb
300
+ - spec/support/helpers/io.rb
301
+ - spec/support/helpers/models.rb
302
+ - spec/support/shared/action_builder.rb
303
+ - spec/support/shared/decoder.rb
304
+ - spec/support/shared/feeds.rb
305
+ - spec/support/shared/fetcher.rb
306
+ - spec/support/shared/filter.rb
307
+ - spec/support/shared/io-like.rb
308
+ - spec/support/shared/output.rb
309
+ - spec/support/shared/parsers.rb
310
+ - spec/support/shared/record.rb
311
+ - spec/threatinator/actions/list/action_spec.rb
312
+ - spec/threatinator/actions/run/action_spec.rb
313
+ - spec/threatinator/actions/run/config_spec.rb
314
+ - spec/threatinator/actions/run/coverage_observer_spec.rb
315
+ - spec/threatinator/actions/run/output_config_spec.rb
316
+ - spec/threatinator/cli/list_action_builder_spec.rb
317
+ - spec/threatinator/cli/run_action_builder_spec.rb
318
+ - spec/threatinator/cli_spec.rb
319
+ - spec/threatinator/config/base_spec.rb
320
+ - spec/threatinator/config/feed_search_spec.rb
321
+ - spec/threatinator/decoders/gzip_spec.rb
322
+ - spec/threatinator/event_builder_spec.rb
323
+ - spec/threatinator/event_spec.rb
324
+ - spec/threatinator/feed_builder_spec.rb
325
+ - spec/threatinator/feed_registry_spec.rb
326
+ - spec/threatinator/feed_runner_spec.rb
327
+ - spec/threatinator/feed_spec.rb
328
+ - spec/threatinator/fetcher_spec.rb
329
+ - spec/threatinator/fetchers/http_spec.rb
330
+ - spec/threatinator/filter_spec.rb
331
+ - spec/threatinator/filters/block_spec.rb
332
+ - spec/threatinator/filters/comments_spec.rb
333
+ - spec/threatinator/filters/whitespace_spec.rb
334
+ - spec/threatinator/parser_spec.rb
335
+ - spec/threatinator/parsers/csv/parser_spec.rb
336
+ - spec/threatinator/parsers/getline/parser_spec.rb
337
+ - spec/threatinator/parsers/json/parser_spec.rb
338
+ - spec/threatinator/parsers/json/record_spec.rb
339
+ - spec/threatinator/parsers/xml/node_spec.rb
340
+ - spec/threatinator/parsers/xml/parser_spec.rb
341
+ - spec/threatinator/parsers/xml/path_spec.rb
342
+ - spec/threatinator/parsers/xml/pattern_spec.rb
343
+ - spec/threatinator/parsers/xml/record_spec.rb
344
+ - spec/threatinator/plugin_loader_spec.rb
345
+ - spec/threatinator/plugins/output/csv_spec.rb
346
+ - spec/threatinator/plugins/output/null_spec.rb
347
+ - spec/threatinator/plugins/output/rubydebug_spec.rb
348
+ - spec/threatinator/property_definer_spec.rb
349
+ - spec/threatinator/record_spec.rb
350
+ - spec/threatinator/registry_spec.rb
351
+ - spec/threatinator/runner_spec.rb
352
+ homepage: http://github.com/cikl/threatinator
353
+ licenses:
354
+ - LGLv3
355
+ metadata: {}
356
+ post_install_message:
357
+ rdoc_options: []
358
+ require_paths:
359
+ - lib
360
+ required_ruby_version: !ruby/object:Gem::Requirement
361
+ requirements:
362
+ - - ">="
363
+ - !ruby/object:Gem::Version
364
+ version: '0'
365
+ required_rubygems_version: !ruby/object:Gem::Requirement
366
+ requirements:
367
+ - - ">="
368
+ - !ruby/object:Gem::Version
369
+ version: '0'
370
+ requirements: []
371
+ rubyforge_project:
372
+ rubygems_version: 2.2.2
373
+ signing_key:
374
+ specification_version: 4
375
+ summary: Threatinator is a library and tool for parsing threat data feeds.
376
+ test_files: []