EDL for Specific Azure IPs/Tags Using Minemeld

cancel
Showing results for 
Search instead for 
Did you mean: 

EDL for Specific Azure IPs/Tags Using Minemeld

L4 Transporter

I'm looking for a way to use the JSON file from Microsoft which lists Azure IPs and services tags (https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519) to create an EDL. However, I only want to include the IPs for Storage.EastUS2 in the resulting EDL. I've seen reference to a prototype called azure.public-cloudIPsWithServiceTags on Reddit (https://www.reddit.com/r/paloaltonetworks/comments/hr6ckm/azure_ip_feed_from_json/), but I don't see this prototype listed in Minemeld.

1 REPLY 1

Cyber Elite
Cyber Elite

@OwenFuller,

You sure you're running the most current version of MineMeld? azure.public-cloudIPsWithServiceTags and auzre.cloudIPsWithServiceTags are both core prototypes included out of the box. I'd try updating or just spin up the latest docker image to ensure that you're actually on the latest build. 

 

 

So the beautiful thing about JSON is that you can manipulate it really easily. A little bit of Python and you could capture the Storage.EastUS2 addressPrefixes pretty easily and use the MineMeld API to serve this information back into MineMeld. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!