This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About lmori
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About lmori
03-07-2022
8Posts
4Likes
3Solutions
Mar 07, 2022Last Visited
User
Activity
User
Profile
Latest posts by lmori
| Subject | Views | Posted |
|---|---|---|
| 473 | 03-07-2022 06:46 AM | |
| 923 | 04-28-2021 08:04 AM | |
| 1675 | 03-11-2021 06:03 AM | |
| 947 | 03-10-2021 05:34 AM | |
| 777 | 03-05-2021 06:12 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 04-28-2021 08:04 AM | |
| 1 Like | 03-11-2021 06:03 AM | |
| 2 Likes | 10-28-2020 07:30 AM |
User Badges
Community Statistics
| Member Since | 10-28-2020 07:16 AM |
| Date Last Visited | 03-07-2022 12:07 PM |
| Posts | 8 |
| Total Likes Received | 4 |
03-07-2022
06:46 AM
@ksauer507 you should use the URL of TAXII 1.1 discovery service, and use the TAXII 1.1 collection names.
... View more
04-28-2021
08:04 AM
1 Kudo
@VCiverra I am sorry but I don't know much about Fortigate. Maybe someone in the community can help you.
... View more
03-11-2021
06:03 AM
1 Kudo
Hi @LassiK ,
MineMeld binaries are not compatible with Ubuntu 18.04.
My suggestion for running it on 18.04 is using Docker image. Moving forward that will be the preferred way of deployment.
Luigi
... View more
03-10-2021
05:34 AM
@Romans6 @ChaunceyBrace could you tell me more about your configs? How many IOCs? what type of nodes? what process is taking most of the memory?
... View more
03-05-2021
06:12 AM
In TAXII you don't need a URL per feed, the TAXII Client interrogates the TAXII Discovery Service to discover the available services and then the client interrogates the TAXII Collection Management Service (whose URL is returned by the TAXII Discovery Service) to list the available Data Feeds.
So basically yes, MineMeld does support multiple output TAXII Data Feeds and you just need one URL to access them all. Based on authorization configs (TAGS) different users will see different available feeds.
... View more
02-23-2021
12:40 AM
For that JSON structure you cannot use the JSON parser, as the indicators are the keys of the feed and this is not supported. The JSON Miners expects a list of objects/indicators. Also if the feed is large JSON does not scale too well, as the full file should be loaded and parsed to extract indicators. I would suggest to use CSV Miner instead.
The problem with the filter on the score is that the score attribute is a string and not a number, the filter score > 99 could not work then. You should convert score to number before filtering, basically yous should try: to_number(score) > 99
... View more
02-19-2021
03:00 AM
@JohanBogema working a new version of MineMeld based on python3 and new docker mechanism. Please note that while the init process inside the current docker image is running as root, MineMeld and all the exposed services are running as limited users.
... View more
10-28-2020
07:30 AM
2 Kudos
We have identified the issue and we are working on it.
In the meantime you can disable the send-a-suggestion feature that is triggering the crash in 2 ways:
- from the config, https://github.com/PaloAltoNetworks/minemeld-ansible#disable-send-a-suggestion-check
- on the docker CLI, add:
-e "SNS_ENABLED=false"
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
03-07-2022
12:07 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks