02-18-2021 08:03 AM
I am trying to ingest Malware Bazaar feed into Minemeld and I'm finding that the CSV export from Malware Bazaar includes almost all of their indicators between quotations. (Ex: "bd768d902abb211edf805fddc926ad87287a770c70ac62475ad4f25d1f314d39"). Is there any way to remove " characters as they are being ingested into Minemeld?
Miner:
age out:
default: 30d
attributes:
confidence: 100
share_level: green
type: SHA256
fieldnames:
- first_seen_utc
- indicator
- md5_hash
- sha1_hash
- reporter
- file_name
- file_type_guess
- mime_type
- signature
- clamav
- vtpercent
- imphash
- ssdeep
- tlsh
ignore_regex: ^#
initial_interval: 30d
interval: 300
source_name: abusech.MalwareBazaar
url: https://bazaar.abuse.ch/export/csv/recent/
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
