https://live.paloaltonetworks.com/t5/general-topics/talos-blacklist/m-p/190676#M97566 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/44682">@Hal_Blum</a> : Just create and consume a new prototype based on the HttpFT class. You can use, for instance, the prototype "openbl.base" as the base for the new prototype.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="talos_blocklist.png" style="width: 800px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/12912iAD35F29245E73AF0/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="talos_blocklist.png" alt="talos_blocklist.png" /></span></P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Thu, 07 Dec 2017 19:06:06 GMT xhoms 2017-12-07T19:06:06Z https://live.paloaltonetworks.com/t5/general-topics/talos-blacklist/m-p/190671#M97565 <P>I am trying to create a miner/processor/output nodes for the talos black list ( <A href="https://talosintelligence.com/documents/ip-blacklist" target="_blank">https://talosintelligence.com/documents/ip-blacklist</A> ) and am failing. Has anyone got this to work?</P> Thu, 07 Dec 2017 18:03:47 GMT https://live.paloaltonetworks.com/t5/general-topics/talos-blacklist/m-p/190671#M97565 Hal_Blum 2017-12-07T18:03:47Z https://live.paloaltonetworks.com/t5/general-topics/talos-blacklist/m-p/190676#M97566 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/44682">@Hal_Blum</a> : Just create and consume a new prototype based on the HttpFT class. You can use, for instance, the prototype "openbl.base" as the base for the new prototype.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="talos_blocklist.png" style="width: 800px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/12912iAD35F29245E73AF0/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="talos_blocklist.png" alt="talos_blocklist.png" /></span></P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Thu, 07 Dec 2017 19:06:06 GMT https://live.paloaltonetworks.com/t5/general-topics/talos-blacklist/m-p/190676#M97566 xhoms 2017-12-07T19:06:06Z https://live.paloaltonetworks.com/t5/general-topics/talos-blacklist/m-p/192405#M97567 <P>I use this config for blacklsit ip only</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="20-12-2017 13-44-29.jpg" style="width: 525px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/13052iC7BEC229289B7E6A/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="20-12-2017 13-44-29.jpg" alt="20-12-2017 13-44-29.jpg" /></span></P> Wed, 20 Dec 2017 06:46:15 GMT https://live.paloaltonetworks.com/t5/general-topics/talos-blacklist/m-p/192405#M97567 iThreatHunt 2017-12-20T06:46:15Z