About Kimwii

@lmori still having hazzle with creating a json prototype with basic auth for this format   {   "something1": [     "somedomain1.tld",     "somedomain2.tld"   ],   "something2": [     "somedomain3.tld",     "somedomain4.tld"   ],   "something3": [     "somedomain5.tld",  "somedomain6.tld",   ] }   Any tips or ticks ? :).   Also  want to recomend minemeld anyone who'd like a easy way to manage their IOCs. @lmori is super awsome and always helpfull.   Also is there a place i can write a review of minemeld here at paloaltos website ?. That's the least i can do for everything you guys have done to make my day easier ... View more

@lmori how do i use the basic auth in my prototypes?. Just the normal way http/https://username:password@somedomain.tld ? ... View more

Hi @lmori when is the new image docker ready (jtschichold/minemeld) ? ... View more

@lmori hi again. We talked about feeds an basicauth some timeago and i wondered how do i get minemeld to "support" basic auth feeds ?. Is there som magic trick or is it an rfc ... View more

I think misp has it's own feed tools. But if you want to integrate the feed into misp i recommend using pymisp. https://github.com/CIRCL/PyMISP https://media.readthedocs.org/pdf/pymisp/master/pymisp.pdf   USE the api call below  add_url(event, url, category=’Network activity’, to_ids=True, comment=None, distribution=None, proposal=False)   Remembner to change your key file and add your api key for misp   ... View more

I'm currently in the process of creating a new prototype to pull a feed from a trusted source. The feed uses basicauth so i tried to do as following url: https://username:password@domain.tld But no luck. Is there a trick i need to know about when it comes to password protected feeds with BasicAuth or other types of authentication ? ... View more