Removing " character from Malware Bazaar CSV Input
cancel
Showing results for 
Search instead for 
Did you mean: 

Removing " character from Malware Bazaar CSV Input

L0 Member

I am trying to ingest Malware Bazaar feed into Minemeld and I'm finding that the CSV export from Malware Bazaar includes almost all of their indicators between quotations. (Ex: "bd768d902abb211edf805fddc926ad87287a770c70ac62475ad4f25d1f314d39"). Is there any way to remove " characters as they are being ingested into Minemeld?

 

SHA256Hases_MalwareBazaar.jpg

SHA256Hases_JSON_MalwareBazaar.jpg

  

Miner:

age out:
default: 30d
attributes:
confidence: 100
share_level: green
type: SHA256
fieldnames:
- first_seen_utc
- indicator
- md5_hash
- sha1_hash
- reporter
- file_name
- file_type_guess
- mime_type
- signature
- clamav
- vtpercent
- imphash
- ssdeep
- tlsh
ignore_regex: ^#
initial_interval: 30d
interval: 300
source_name: abusech.MalwareBazaar
url: https://bazaar.abuse.ch/export/csv/recent/

 

0 REPLIES 0
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!