topic Re: AutoFocus miner to DBL output example request in General Topics

AutoFocus miner to DBL output example request

andreip — Mon, 10 Oct 2016 06:42:56 GMT

Hello,

Could you, please, post a full example on using AutoFocus miner to get an usable DBL ? The PANW AF demo could be used with API by partners' users with Threat Role.

Many thanks,

andreip

Re: AutoFocus miner to DBL output example request

ksteves1 — Tue, 11 Oct 2016 01:03:13 GMT

There is a video to describe this. A few things have changed I think. Does this help?

https://live.paloaltonetworks.com/t5/MineMeld-Discussions/Video-MineMeld-on-AWS-amp-Autofocus-Export-Lists/m-p/73245#M11

Re: AutoFocus miner to DBL output example request

andreip — Mon, 17 Oct 2016 23:27:40 GMT

Hello,

Thank you for the promptitude of your answer, I was able to build the miner-aggregator-output chain based on video on a Ubuntu-based MM.

So the AF miner is entirely dependant on the already defined export list in AF and does not build the IPs list/DNS names/domains based on parsing the output of a customizable (in MM, not AF) search ...

Thank you for your time,

andreip

Re: AutoFocus miner to DBL output example request

lmori — Mon, 17 Oct 2016 19:42:26 GMT

Hi @andreip,

correct, currently MM connects to the AF export list feature.

Luigi