topic Re: Minemeld: Custom IP list, miner etc for EDL. in General Topics

Minemeld: Custom IP list, miner etc for EDL.

rkoenig — Mon, 13 Mar 2017 00:33:13 GMT

I apologize if this has been answered in previous posts, I've tried searching and it seems that I'm getting bit and pieces but not the whole picture.

How would I go about creating my own list of IPs and then customizing Minemeld to mine \ gather the IPs to be used in an EDL. We have McKesson products and they recently send us a PDF with a large list of IPs and URLs that need to be allowed in order for their products to function. I was thinking that in the long run it may be easier to create a custom list vs manually creating a security policy.

Re: Minemeld: Custom IP list, miner etc for EDL.

lmori — Mon, 13 Mar 2017 18:15:29 GMT

Hi @rkoenig,

is the PDF public ? do they also provide the content in a more machine readable format ?

luigi

Re: Minemeld: Custom IP list, miner etc for EDL.

rkoenig — Mon, 13 Mar 2017 20:14:28 GMT

Hi Luigi, that is a good question, I have tried searching for the document they sent me but have been unable to find it. I will check with McKesson support and validate if the document is public and if they provide the content in a machine readable format.

Re: Minemeld: Custom IP list, miner etc for EDL.

Sec101 — Wed, 20 Jun 2018 22:09:51 GMT

Is there a miner that can be specifically pointed somewhere- a generic miner?

Re: Minemeld: Custom IP list, miner etc for EDL.

xhoms — Sat, 07 Jul 2018 09:08:26 GMT

Hi @Sec101,

you might want to give my article Using MineMeld to extract indicators from a generic API that introduces the JSON, HTTP and CSV miners that could be considered the "general purpose miners"