TOR prototype for MineMeld like is available on panwdbl?

[andrew.stanton]

Hi,

Anyone have a prototype for the TOR IP list already aggregated by panwdbl via Emerging Threats?

Thank you.

[lmori · Accepted solution]

Hi @andrew.stanton,

That should be easy to add as I already have parser for Snort rules ready to be merged as new Miner. I have created FR#124 to track this: https://github.com/PaloAltoNetworks/minemeld-core/issues/124

[lmori · Accepted solution]

Hi @andrew.stanton,

That should be easy to add as I already have parser for Snort rules ready to be merged as new Miner. I have created FR#124 to track this: https://github.com/PaloAltoNetworks/minemeld-core/issues/124

[andrew.stanton]

Also, I did find a tor prototype.  Hard to search for it because 'tor' is at the end of aggregator and such...

tor.exit_addresses PROTOTYPE

I find this one is different than the Emerging Threats source.  It has less indicators.