This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About Jon_Irish
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About Jon_Irish
06-20-2018
9Posts
1Like
0Solutions
Jun 20, 2018Last Visited
User
Activity
User
Profile
Latest posts by Jon_Irish
| Subject | Views | Posted |
|---|---|---|
| 2258 | 06-20-2018 11:19 AM | |
| 4434 | 06-20-2018 09:40 AM | |
| 4445 | 06-18-2018 07:52 AM | |
| 9857 | 06-01-2018 05:42 AM | |
| 9968 | 05-17-2018 10:59 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 06-20-2018 09:40 AM |
User Badges
Community Statistics
| Member Since | 11-27-2015 12:17 PM |
| Date Last Visited | 06-20-2018 02:40 PM |
| Posts | 9 |
| Total Likes Received | 1 |
06-20-2018
11:19 AM
Does anyone know if there are any plans on releasing detailed documentation for MineMeld? Specifically, I am looking for documentation on writting my own prototypes. I know that can can use existing ones as templates, but I would like to see documentation for all of the prototype settings that are available. A detailed User Guide would be nice too.
... View more
06-20-2018
09:40 AM
1 Kudo
So the DHS FEDGOV feed is "officially" working with MineMeld v0.9.48! I have had it up and running all week, and I current have over 17K "indicators" in MineMeld from the dhs.FEDGOV feed.
If you are a government entity and want to utilize the DHS TAXII feed with MineMeld, make sure that you are running at least v0.9.48 and make sure that you select the dhs.FEDGOV prototype. You will also need a valid DoD cer6tificate for your MineMeld sever (a self-signed cert will NOT work).
Jon
... View more
06-18-2018
07:52 AM
My problem was that we were using a special feed (FedGov) as we are a gov't entity. PaloAlto had to write some new code to get it to work. Last week's update included that code, and it is now working fine for us as well.
Last week, PaloAlto released MineMeld 0.9.48. If you are a gov't subscriber trying to use the FedGov feed, update to this release, and it should now work for you.
Jon
... View more
06-01-2018
05:42 AM
I heard from my contact at Palo Alto last week, and his code for support of the markings in the FEDGOV collection was approved and is waiting for the next release cycle to be pushed out. Once I get the updated code, I'll test everything and update this thread.
Jon
... View more
05-17-2018
10:59 AM
Here is the latest... I am working with one of the PA engineers on this. It appears that the Federal feed uses ACS/ISA markings and MineMeld does not support them. The PA engineer wrote some new code for this support and it was approved by the package maintainers and he is waiting for them to be merged into the code. No eta on when this will happen. We are making progress!
Jon
... View more
05-09-2018
10:56 AM
Hi Luigi,
Dan James mentioned that you might be able to help me with a request I have. I am looking for a document that describes the entire makeup of the .yml file itself as well as all the possible options that can go into a prototype.
Thanks,
Jon
... View more
05-07-2018
08:02 AM
Hello,
Currently we do not have this working. As soon as we get it working, DHS has asked me to write documentation for the process. I will also try to remember to post the write up here as well.
... View more
05-07-2018
05:52 AM
Hi Luigi,
No, the error counters typically stay at 2 or 4 and never move from there. I am working with Dan James on this, and it appears that the feed we are getting from DHS has ACS/ISA markings, and MineMeld does not support them. Dan is working on some new code to add the support and he was able to get a subscription to the feed in question, so I think that we will probably get this working shortly.
Jon
... View more
04-19-2018
12:08 PM
Has anyone gotted the DHS AIS Miner working in MineMeld? We have an account with DHS and I configured the Miner with our subscription id as well as our certs. The miner shows all green (see attached screen-shtot), but I am not getting any indicators. Not sure what I am doing wrong, and DHS doesn't support MineMeld. I noticed that Unit 42 wrote the prototype, so I was hoping one of them might be able to answer my post and point me in the right direction.
TIA,
Jon
... View more
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks