Hi again, after good feedback received on the first post on MineMeld architecture and hardening I wrote a new post on how I built the foundation of near-real-time integration of MineMeld with our Information Security Operation Center (i-SOC) custom S...
Hello All, Based on @lmori's great guide for doing a manual install of Minemeld on Ubuntu 14.04, I have taken his configurations and wrapped them in a Vagrantfile for easy foolproof deployment of Minemeld. It's a simple 3 step process: Install latest...
The error started coming up after I created and committed a custom miner. Pasting what looks like the relevant portion here:2020-06-09T10:24:25 (26502)launcher.main INFO: mm-run.py config: _Config(nodes={'GridMeld': {'inputs': [], 'config': {'attribu...
Our current MineMeld instance is doing a great job of handling our Office 365 requests. Now I'd like to use it to solve a different problem, but I'm not sure how to go about it. We need to allow outbound app-specific traffic to *.somedomain.com. I tr...
Has anybody built a script to push the STIX files from this site into MineMeld? https://www.us-cert.gov/ncas/analysis-reports The stdlib.localDB prototype and HTTP API seem purpose built to solve this issue. The "Annex 2" section of this document sho...
Hi team, I'm trying to setup one minemeld machine but without success. Please check attached file: "Installing new version of config file /etc/redis/redis.conf ...Traceback (most recent call last):File "/usr/sbin/minemeld-auto-update", line 787, in m...
I'm getting this error, how do i get around it? $ sudo apt install -o Dpkg::Options::="--force-overwrite" -y minemeldReading package lists... DoneBuilding dependency tree Reading state information... DoneSome packages could not be installed. This may...
Team, Recently integrated minemeld with Azure sentinel, but the feeds we receive are Ip address ranges such as 18.18.0.0- 18.18.0..x. How to get the single Ip Address from this range.
Hello, I am trying to setup a static list i am updating a txt file hosted in IIS (from output in our IDS service) on IP's I would like to block. I have tried to supply the list directly to EDL list from IIS (created txt via so may ways - including in...
Is updating Minemeld as simple as git cloning the latest? git clone https://github.com/PaloAltoNetworks/minemeld-core.gitgit clone https://github.com/PaloAltoNetworks/minemeld-webui.gitgit clone https://github.com/PaloAltoNetworks/minemeld-node-proto...
Hi,Running the offical Minemeld (0.9.68) via Docker on an ubuntu server. However i'm not sure how to import the cert i've generated into the Docker instance of Minemeld. I've seen lots of posts about nginx, but i've not got nginx running on the box. ...
HI,My Minemeld is running in a docker container. It consumes memory as much as possible. Now the server is configured with 32 GB memory, still 100% usage by Minemeld. It crashes every a couple of days. The requested url for feed gets internal error. ...
Hi community, I am encountering decrypt-err with Anydesk application after deploying SSL Decryption. In order to fix that, I am going to create a list of Public IPv4 that Anydesk use to excludes them from the decryption. Currently I collected an IPv4...
Hi, I noticed in the code that if you use the v=carbonblack parameter on a feed node it spits out a Carbon Black Response formatted feed which works to the point you can load it into Carbon Black Response (ie CB accepts it and it appears with the Min...
Hello everyone. Created and configured an Azure Function, which download Azure DC and Office 365 IP addresses and store them in a storage account. Everything is running in Azure, but generated data can be used as external dynamic lists for PAN-OS. Re...
Hello there I'm Using Minemeld version 0.9.68 (Ubuntu)PA version 8.1.12I'm attempting to install a PA cert on the MineMeld server using this guide: https://live.paloaltonetworks.com/t5/minemeld-articles/how-to-generate-new-minemeld-https-cert/ta-p/10...
Dear all, trying to get MISP working in the latest version without much success so far. Repeated the steps from the previous version where I had it working, but now I'm getting: COMMIT FAILED: Class mmmisp.Miner in ... not safe to load
